----- Original Message -----
From: "Noriko Hosoi" <nhosoi(a)redhat.com>
Sent: Monday, August 18, 2014 5:03:57 PM
Subject: Re: [389-users] cannot make replication work over SSL
You mentioned hosts test-ds1 and test-ds2. What is test-ds3? Is it
No. Sorry, my mistake. I wanted to simplify the description, and so wrote
'test-ds2' when in
acutality, the host I'm trying to make a consumer via replication over ssl is
'test-ds3'. I just
thought it would read better as 'test-ds1 and test-ds2' instead of what I actually
have: test-ds1 the supplier, and test-ds3 the consumer.
Does this command line work on the host test-ds1?
ldapsearch -LLL -x -H ldaps://test-ds3 -s sub -b dc=infinityhealthcare,dc=com
Yes it works.
If yes, what happens if you add this to your agreement?
> nsDS5ReplicaTransportInfo: SSL
The replication agreement still had the state I reported below, so I 'restarted'
the replication by issuing this command:
ldapmodify -cax -h localhost -y ~jdetert/pword -D 'cn=Directory Manager'
dn: cn=dc-ihc-dc-com-to-ds3, cn=replica, cn="dc=infinityhealthcare,dc=com",
cn=mapping tree, cn=config
However, replication still doesn't work. Here's what the agreement looks like
description: agreement to replicate dc=ihc,dc=com tree from ds1 to ds3
nsDS5ReplicatedAttributeList: (objectclass=*) $ EXCLUDE authorityRevocationLis
nsds5replicaLastUpdateStatus: -5 Unable to acquire replicaLDAP error: Timed ou
If it still does not work, could you try replacing the replica host
> nsDS5ReplicaHost: test-ds3
Getting to that. Will reply when I've tried it.