Can you contact the server directly with ldapwhoami ? Does that show similar errors?
Can't contact ldap server can mean multiple things from wrong ip, wrong port, invalid cert, cert hostname mismatch, etc. So it's not a good error.
> On 21 Jul 2023, at 23:34, Ghiurea, Isabella <Isabella.Ghiurea@nrc-cnrc.gc.ca> wrote:
>
> Hi List,
> we are running an old ldap version and having issues running fixup-memberof.pl script in master-slave cfg fractional replication with member off excluded , can not create index locally. I tried using different protocols when invoking the script :LDAPS, STARTTLS but same error . Any idea what can be the cause of this issue?
>
> Here are details :
>
> 389-ds-base-libs-1.3.7.5-24.el7_5.x86_64
> 389-ds-base-1.3.7.5-24.el7_5.x86_64
> /usr/lib64/dirsrv/slapd-sldapX/fixup-memberof.pl -D "cn=Directory Manager" -w - -b "dc=XXX,dc=net"
> Bind Password:
> ldap_start_tls: Can't contact LDAP server (-1)
> Failed to add task entry "cn=memberOf_fixup_2023_7_20_11_59_27, cn=memberOf task, cn=tasks, cn=config" error :ldap-ds
>
> /usr/lib64/dirsrv/slapd-sldapX/fixup-memberof.pl -D "cn=Directory Manager" -w - -b "dc =XXX,dc=net" -Z host_name -P LDAPS
> Bind Password:
> ldap_start_tls: Can't contact LDAP server (-1)
> Failed to add task entry "cn=memberOf_fixup_2023_7_20_11_52_44, cn=memberOf task, cn=tasks, cn=config" error (1)
>
> Thank you
> Isabella
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
> Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--
Sincerely,
William Brown
Senior Software Engineer,
Identity and Access Management
SUSE Labs, Australia
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
No comments:
Post a Comment