On 09/05/2018 12:36 PM, rai...@ultra-secure.de wrote:
Am 2018-09-04 17:39, schrieb Marc Muehlfeld:
Hi Rainer,

Yes it is a typo, it should be: cn=dc\=sub\,dc\=domain\,dc\=ch,cn=mapping tree,cn=config
thanks for finding the typo. I fix it and republished the guide:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_replication-configuring-replication-cmd#Configuring-Replication-Consumers-cmd



Thanks.
I wasn't sure if it was a silly question - but it surely stumped me.


However, I still can't get replication to work.
(Two hosts, multi-master)

I tried using the command-line only, but the 2nd host would not show as "multi-master" in the gui.


It's created the replication manager dn like this:

dn: cn=replication manager,cn=config
objectClass: top
objectClass: device
objectClass: simpleSecurityObject
cn: replication manager
userPassword:  password
nsIdleTimeout: 0


This I entered in the supplier dn dialog on both servers.

The referral url of server A is server B and vice-versa.

I've set different replica IDs.

In the replication-agreement, I again chose server B on server A and vice-versa.

I changed the password for the replication manager to be the same on both hosts just to be sure.

When I try to start replicating on server B, I get:


[05/Sep/2018:17:08:02.623414486 +0200] - ERR - NSMMReplicationPlugin - acquire_replica - agmt="cn=repl-agreement-t1" (serverA:636): Unable to acquire replica: permission denied. The bind dn "cn=replication manager,cn=config" does not have permission to supply replication updates to the replica. Will retry later.
Your replication manager is not configured in the main replication config entry.  Example:

dn: cn=replica,cn=dc\=example\,dc\=com,cn=mapping tree,cn=config
changetype: add
add: nsds5ReplicaBindDN
nsds5ReplicaBindDN: cn=replication manager,cn=config

Do this on both masters

Regards,
Mark





What else do I need?


Server A already contains some data, will this replicate to server B upon initialization or do I have to do something special?





Best Regards
Rainer
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

Reply via email to