On Fri, Aug 29, 2008 at 03:06:04PM -0400, Luke Schierer wrote:
Hi, I just set up Fedora Directory Server on two nodes, and have set up multi-master replication between them following the directions at http://directory.fedoraproject.org/wiki/Howto:WalkthroughMultimasterSSL
It seems to mostly work, but I have a few questions.
1)After initializing nodeB and restarting nodesA and B, I can no longer connect to nodeB with the Console application. If I type in its hostname, it connects, but I can only open up the slapd directory if nodeA is up. I can continue to log into nodes authenticating against the pair, and I can use the command line utities to connect to nodeB. Any ideas what I might be doing wrong?
2)if I change a password (using the passwd command on a client) while nodeA is down, or add a user with ldapmodify while nodeA is down, the change does not seem to replicate back to nodeA after it comes back up. Do I have to force an initialization in such cases?
Thanks, Luke
A couple of additional details. This is on a 32-bit Redhat Enterprise 5 server. The first issue only happens if I set it to replicate ou=NetscapeRoot, which appears to be necessary for the global password policy to replicate. Is there a better way to achieve this?
I tried using the fdstool script in one archived email, but that gave me errors when I tried to run it, and so I turned to the more manual instructions in the MultimasterSSL guide. I removed my fedora-ds install between trying with the script and doing it myself following the guide.
Thanks, Luke