Mike Mercier wrote: > Hello, > > I am getting the following error on both ends of a replication > agreement. The replication agreement is for the fedora dogtag CA > application. > Note: I had to manually do a few things to get it to work, the > automated cloning was failing to setup the replication agreement. > > NSMMReplicationPlugin - repl_set_mtn_referrals: could not set > referrals for replica dc=<dogtag dc>: 1 > Looks like some sort of timing thing - like the server has not been fully started yet or fully set up yet before it receives the replication request from the other master > Note: Dogtag and fedora-ds are running on the same systems: > > Server-1 - fedora-ds and dogtag > Server-2 - fedora-ds and dogtag clone > > Replication agreements between the systems for: > o=NetscapeRoot > userRoot > dogtag dc > > The error *only* appears for the dogtag dc. > > In my dse.ldif, I do notice that there is only one nsslapd-referral > for the dogtag dc (for server-1 to server-2) > > Server-1 > > dn: cn="dc=<dogtag dc>",cn=mapping tree, cn=config > objectClass: top > objectClass: extensibleObject > objectClass: nsMappingTree > cn: dc=<dogtag dc> > cn: "dc=<dogtag dc>" > nsslapd-backend: pki > nsslapd-state: Backend > creatorsName: cn=directory manager > modifiersName: cn=server,cn=plugins,cn=config > createTimestamp: 20090520160944Z > modifyTimestamp: 20090520162351Z > nsslapd-referral: ldap://server-2.internaldomain:389/dc%3D<dogtag dc> > numSubordinates: 1 > > Server-2 > dn: cn="dc=<dogtag dc>",cn=mapping tree, cn=config > objectClass: top > objectClass: extensibleObject > objectClass: nsMappingTree > cn: dc=<dogtag dc> > cn: "dc=<dogtag dc>" > nsslapd-backend: pki > nsslapd-state: Backend > creatorsName: cn=directory manager > modifiersName: cn=server,cn=plugins,cn=config > createTimestamp: 20090520165422Z > modifyTimestamp: 20090520180434Z > numSubordinates: 1 > > > Searching google doesn't really point to an explanation (or solution) > to the error messages. > Is it safe to do an ldapmodify to add the entry on Server-2? > Yes, although the replication code is supposed to set that automatically, and may overwrite it. > Thanks, > Mike > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3258 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20090520/cdd0adbe/attachment.bin