[389-users] Re: multi-supplier replication with certificate-based authentication

This means that the user ... well doesn't have permission!

You need to add the bind dn to nsDS5ReplicaBindDN I think it is. That's what grants them the permission to be a replication user.

There is also the ability to use a replication bind dn group if you want per-server identities



> On 7 Mar 2022, at 16:12, Giacomo Comes <comes@naic.edu> wrote:
>
> does not have permission to supply replication updates to the replica. Will retry later.

--
Sincerely,

William Brown

Senior Software Engineer,
Identity and Access Management
SUSE Labs, Australia
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure