On Fri, Aug 29, 2008 at 03:06:04PM -0400, Luke Schierer wrote:
Hi,
I just set up Fedora Directory Server on two nodes, and have set up
multi-master replication between them following the directions at
http://directory.fedoraproject.org/wiki/Howto:WalkthroughMultimasterSSL
It seems to mostly work, but I have a few questions.
1)After initializing nodeB and restarting nodesA and B, I can no
longer connect to nodeB with the Console application. If I type in
its hostname, it connects, but I can only open up the slapd directory
if nodeA is up. I can continue to log into nodes authenticating
against the pair, and I can use the command line utities to connect to
nodeB. Any ideas what I might be doing wrong?
2)if I change a password (using the passwd command on a client) while
nodeA is down, or add a user with ldapmodify while nodeA is down, the
change does not seem to replicate back to nodeA after it comes back
up. Do I have to force an initialization in such cases?
Thanks,
Luke
A couple of additional details. This is on a 32-bit Redhat Enterprise
5 server. The first issue only happens if I set it to replicate
ou=NetscapeRoot, which appears to be necessary for the global password
policy to replicate. Is there a better way to achieve this?
I tried using the fdstool script in one archived email, but that gave
me errors when I tried to run it, and so I turned to the more manual
instructions in the MultimasterSSL guide. I removed my fedora-ds
install between trying with the script and doing it myself following
the guide.
Thanks,
Luke