Can you contact the server directly with ldapwhoami ? Does that show similar errors?
Can't contact ldap server can mean multiple things from wrong ip, wrong port, invalid
cert, cert hostname mismatch, etc. So it's not a good error.
On 21 Jul 2023, at 23:34, Ghiurea, Isabella
<Isabella.Ghiurea(a)nrc-cnrc.gc.ca> wrote:
Hi List,
we are running an old ldap version and having issues running fixup-memberof.pl script in
master-slave cfg fractional replication with member off excluded , can not create index
locally. I tried using different protocols when invoking the script :LDAPS, STARTTLS but
same error . Any idea what can be the cause of this issue?
Here are details :
389-ds-base-libs-1.3.7.5-24.el7_5.x86_64
389-ds-base-1.3.7.5-24.el7_5.x86_64
/usr/lib64/dirsrv/slapd-sldapX/fixup-memberof.pl -D "cn=Directory Manager" -w
- -b "dc=XXX,dc=net"
Bind Password:
ldap_start_tls: Can't contact LDAP server (-1)
Failed to add task entry "cn=memberOf_fixup_2023_7_20_11_59_27, cn=memberOf task,
cn=tasks, cn=config" error :ldap-ds
/usr/lib64/dirsrv/slapd-sldapX/fixup-memberof.pl -D "cn=Directory Manager" -w -
-b "dc =XXX,dc=net" -Z host_name -P LDAPS
Bind Password:
ldap_start_tls: Can't contact LDAP server (-1)
Failed to add task entry "cn=memberOf_fixup_2023_7_20_11_52_44, cn=memberOf task,
cn=tasks, cn=config" error (1)
Thank you
Isabella
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
--
Sincerely,
William Brown
Senior Software Engineer,
Identity and Access Management
SUSE Labs, Australia