slave сервер при поступлении на него запроса не переправляет его мастеру. Даже не мытается стукнуться на master(tcpdump не показыавет ни одного пакетика в ту сторону).
из master slapd.conf:
include /etc/ldap/schema/core.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/misc.schema
include /etc/ldap/schema/samba.schema
loglevel 256
suffix "dc=example,dc=com"
replica uri=ldap://slave.example:389
bindmethod=simple
binddn="cn=replicator,dc=example,dc=com"
credentials=hehe1234
replogfile /var/lib/ldap/replog
access to attrs=userPassword,shadowLastChange
by dn="cn=admin,dc=example,dc=com" write
by dn="cn=replicator,dc=example,dc=com" write
by anonymous auth
by self write
by * none
access to dn.base="" by * read
access to *
by dn="cn=admin,dc=example,dc=com" write
by dn="cn=replicator,dc=example,dc=com" write
by * read
==========================================
slave slapd.conf отличается лишь этим:
updatedn "cn=replicator,dc=example,dc=com"
updateref ldap://master.example.com:389
replica и replogfile в нём не указаны.
=========================================
При изменении базы на master-е, репликация на slave проходит удачно.
Базы идентичны.
slave:/etc/ldap# ldapadd -x -D cn=root,dc=example,dc=com -w hehe1234 -f /tmp/1.ldif
adding new entry "cn=hehe,dc=example,dc=com"
ldap_add: Referral (10)
referrals:
ldap://slave.example.com:389/cn=hehe,dc=example,dc=com
slave syslog:
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor
Feb 11 17:53:09 pinky slapd[9189]: daemon: listen=7, new connection on 11
Feb 11 17:53:09 pinky slapd[9189]: daemon: added 11r (active) listener=(nil)
Feb 11 17:53:09 pinky slapd[9189]: conn=1 fd=11 ACCEPT from IP=127.0.0.1:1885 (IP=0.0.0.0:389)
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on:
Feb 11 17:53:09 pinky slapd[9189]: 11r
Feb 11 17:53:09 pinky slapd[9189]:
Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 BIND dn="cn=root,dc=example,dc=com" method=128
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 BIND dn="cn=root,dc=example,dc=com" mech=SIMPLE ssf=0
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 RESULT tag=97 err=0 text=
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on:
Feb 11 17:53:09 pinky slapd[9189]: 11r
Feb 11 17:53:09 pinky slapd[9189]:
Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=1 ADD dn="cn=hehe,dc=example,dc=com"
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=1 RESULT tag=105 err=10 text=
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on:
Feb 11 17:53:09 pinky slapd[9189]: 11r
Feb 11 17:53:09 pinky slapd[9189]:
Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11
Feb 11 17:53:09 pinky slapd[9189]: connection_read(11): input error=-2 id=1, closing.
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor
Feb 11 17:53:09 pinky slapd[9189]: daemon: waked
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=2 UNBIND
Feb 11 17:53:09 pinky slapd[9189]: daemon: removing 11
Feb 11 17:53:09 pinky slapd[9189]: conn=1 fd=11 closed
======================================
debian etch