Erro em replicar ldap

ViniMagrelo
(usa Ubuntu)

Enviado em 01/09/2011 - 16:30h

Olá, estou com um problema.
Tenho dois ldaps funcionando, um com samba outro com sasl e queria replicar
um no outro. mas estou com o erro:
Sep 1 16:14:09 Servidor slapd[18097]: slap_client_connect: URI=ldaps://xxx.xxx.xxx DN="cn=replicator,dc=dominio,dc=com,dc=br" ldap_sasl_bind_s failed (-1).

minha configuração de slapd:


include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/samba.schema


pidfile /usr/local/var/run/slapd.pid
argsfile /usr/local/var/run/slapd.args
loglevel 256

modulepath /usr/local/libexec/slapd
moduleload syncprov
moduleload back_bdb.la


sizelimit 500
tool-threads 1


######access to * by dn="cn=replicator,dc=dominio,dc=com,dc=br" write ---------------- (Se essa linha fica descomentada o ldap nao sobe)

#######################################################################
# BDB database definitions
#######################################################################
database bdb
suffix "dc=dominio,dc=com,dc=br"
rootdn "cn=manager,dc=dominio,dc=com,dc=br"

rootpw senha
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /usr/local/var/openldap-data
# Indices to maintain

#index objectClass eq
dbconfig set_cachesize 0 2097152 0

# Number of objects that can be locked at the same time.
dbconfig set_lk_max_objects 1500
# Number of locks (both requested and granted)
dbconfig set_lk_max_locks 1500
# Number of lockers
dbconfig set_lk_max_lockers 1500

index objectClass,uidNumber,gidNumber eq
index cn,sn,uid,displayName pres,sub,eq
index memberUID,mail,givenname eq,subinitial
index sambaSID,sambaPrimaryGroupSID,sambaDomainName eq
index entryCSN eq
index entryUUID eq


overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100



e a do segundo:


include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/samba.schema
# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
#schemacheck on
pidfile /usr/local/var/run/slapd.pid
argsfile /usr/local/var/run/slapd.args

loglevel 256

modulepath /usr/local/libexec/slapd
moduleload back_bdb.la
backend bdb
#checkpoint 512 30
database bdb
suffix "dc=dominio,dc=com,dc=br"
rootdn "cn=Manager,dc=dominio,dc=com,dc=br"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw senha

# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /usr/local/var/openldap-data
dbconfig set_cachesize 0 2097152 0

# Number of objects that can be locked at the same time.
dbconfig set_lk_max_objects 1500
# Number of lockers
dbconfig set_lk_max_lockers 1500

index objectClass,uidNumber,gidNumber eq
index cn,sn,uid,displayName pres,sub,eq
index memberUID,mail,givenname eq,subinitial
index sambaSID,sambaPrimaryGroupSID,sambaDomainName eq
index entryCSN eq
index entryUUID eq

syncrepl rid=001
provider=ldaps://184.106.179.198
type=refreshAndPersist
interval=00:00:01:00
searchbase="dc=dominio,dc=com,dc=br"
filter="(objectClass=*)"
scope=sub
attrs="*,+"
schemachecking=off
bindmethod=simple
binddn="cn=replicator,dc=dominio,dc=com,dc=br"
credentials=senha
retry="60 10 300 3"

updateref "ldaps://184.106.179.198"

103,1-8 80%


sizelimit 500
tool-threads 1



Agradeço desde já

viniciusmerlim
(usa CentOS)

Enviado em 22/12/2012 - 18:51h

Já tentou:
ao invés de:

######access to * by dn="cn=replicator,dc=dominio,dc=com,dc=br" write ---------------- (Se essa linha fica descomentada o ldap nao sobe)

isso:

access to * by dn="cn=replicator,dc=dominio,dc=com,dc=br" read

?
testa e posta aqui.