On 02/18/2014 02:52 PM, Brian Epstein wrote:
-----BEGIN PGP SIGNED MESSAGE-----
I recently setup two new 389-ds servers in a multi-master replicated
pair. I am only replicating the userRoot database at this time.
Everything is working well, SSL is setup, replication is working on
I'm using CentOS 6.5 with the EPEL packages, everything is up to date.
I would like this new multi-master pair to start being a read-only
consumer for a few other ldap servers in our environment. Here is the
dc=ias,dc=edu (multi-master pair)
dc=math,dc=ias,dc=edu (separate ldap server)
dc=sns,dc=ias,dc=edu (separate ldap server)
dc=itg,dc=ias,dc=edu (separate ldap server)
dc=net,dc=ias,dc=edu (separate ldap server)
If I'm reading things correctly, I need to have a separate database
for each of the sub domains in order to setup a new replication agreement.
So, I load up the Directory Server Console, navigate to Configuration
- -> Data and right click on the suffix dc=ias,dc=edu. I select "New
Sub Suffix" and fill it out. For example, I'll put in "dc=math" for
the New Suffix, and create an associate database automatically and
name it "math".
One thing to note, the suffix dc=ias,dc=edu displays as
"dc\3Dias\2Cdc\3Dedu". I'm guessing that the hex encoding isn't a big
deal, but just in case....
When I click "OK", I'm greeted with the following error.
Undefined resource: mappingtree-error-add-mapping-msg.
The suffix could not be created.
Please file a ticket at
In the meantime, you may have to use the command line to set up some of
the suffix/databases. See
There should be command line instructions for everything.
I must be missing something, although my Google-fu has been lacking
on finding the answer. Am I headed down the right path for what I
want to do?
Thanks for your help,
Brian Epstein <bepstein(a)ias.edu> +1 609-734-8179
Manager, Network and Security Institute for Advanced Study
Key fingerprint = 128A 38F4 4CFA 5EDB 99CE 4734 6117 4C25 0371 C12A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
-----END PGP SIGNATURE-----
389 users mailing list