SUMMARY: Netscape/iplanet LDAP replication help

I received two responses to this query.  It's unfortunate that sun/iplanet's
documentation isn't more clear.


> From: Lee Trujillo [mailto:lee.trujillo@navidec.com] 
Hey Dustin.

First off, you can remove the uid=RManager, the replication function
requires a
pseudo or non-active user much like cn=Directory Manager.  Remove the ACI
also,
the Replication user will not need this.

1) On the consumer (replica) where you specify the bind user for
replication,
put in something like "cn=Replication Manager"...again this is a "special"
system user that is not located in either your o=replicate_tree or
o=NetscapeRoot.

2) Setup the Change log using the Defaults on the Master.

3) Setup your replication agreement using the cn=Replication Manager special
user and password you added on the Consumer.

4) Initialize your replication agreement.  If there are more than a few
thousand
users, and you have a slow network you may want to have the Replication
Agreement Wizard save an Initialization LDIF File.  This way you can ftp it
to
the Consumer, import that ldif file, after which you would go back to the
Master
and the Replication Agreement and "syncronize" the two.  This gets any
changes
made since you imported the initialization ldif file.

Make sense ?

Lee

---

> From: John Birtley [mailto:jbirtley@accesscomputing.co.uk] 
Try doing the bind as Directory Manager, see how you get on with that.

Also, try binding using the command line utilities:

	cd /usr/netscape/server4/shared/bin
	./ldapsearch -h CONSUMER -p 389 -b o=tree_to_replicate -D
"cn=RManager" -w
PASS -v "cn=*"

See if that allows you to bind.

The version thing should not give you any problems - LDAP is a standard
protocol.


> -----Original Message-----
> From: sunmanagers-admin@sunmanagers.org
> [mailto:sunmanagers-admin@sunmanagers.org]On Behalf Of Hoff_D
> Sent: 07 March 2002 16:37
> To: 'sunmanagers@sunmanagers.org'
> Subject: Netscape/iplanet LDAP replication help
>
>
> Hello,
> I have a 4.15 supplier and 4.16 consumer but I cannot get replication
> working.  I have followed the admin guides and what online info I
> have found
> and here is what I have done:
>
> 1. created user "uid=RManager, ou=administrators, ou=topologymanagement,
> o=netscaperoot" on consumer
> 2. created aci to allow uid=rmanager full access to o=tree_to_replicate
> 3. specified rmanager info and password in consumer replication config
> 4. created new SIR agreement on supplier using
> o=tree_to_replicate, c=us and
> uid=rmanager, ou=adminstrators...
>
> It finally starts to initialize the consumer, and then finishes a few
> minutes later with only
> "online replica creation: repl_bind to server:389 failed.  Aborting"
>
> The access logs on the consumer show that the supplier was able to bind to
> the tree using the rmanager user, and I don't see anything indicating a
> problem.
>
> I'm sure this is an easy problem to resolve, but I'm new to ldap
> and haven't
> been able to find a good source of information to help work through this.
> Any insight would be greatly appreciated!
>
> Dustin
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers