Hi, We use 389DS and AD with a Winsync method. Our LDAP DIT : * dc=toutou,dc=fr ** dc=orleans,dc=toutou,dc=fr *** ou=people,dc=orleans,dc=toutou,dc=fr *** ou=group,dc=orleans,dc=toutou,dc=fr ** dc=bondy,dc=toutou,dc=fr *** ou=people,dc=bondy,dc=toutou,dc=fr *** ou=group,dc=bondy,dc=toutou,dc=fr Our AD DIT : * dc=toutou,dc=org ** ou=orleans,dc=toutou,dc=org *** ou=utilisateurs, ou=toutou, dc=ird,dc=org *** ou=groupes, ou=toutou,dc=ird,dc=org One can see some OU names are different, such as DIT root. So we cretaed a sync agrement as ou=people,dc=orleans,dc=toutou,dc=fr --- ou=utilisateurs, ou=toutou, dc=ird,dc=org All seems to be ok. However, we need to sync other subtrees, like ou=people,dc=bondy,dc=toutou,dc=fr It seems 389DS wants to syncronize high level entries which are not specified in the agrement. As it tries to do it for each sub agrement, failure occurs with a duplicate value error. How can we do ? Log [08/Oct/2009:15:26:31 +0200] NSMMReplicationPlugin - agmt="cn=win bdy" (maqsvrdc0001:636): Replica has no update vector. It has never been initialized. [08/Oct/2009:15:26:33 +0200] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=win bdy" (maqsvrdc0001:636)". [08/Oct/2009:15:26:33 +0200] - add value "" to attribute type "ARecord" in entry "DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=toutou,DC=org" failed: duplicate new value [08/Oct/2009:15:26:34 +0200] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=win bdy" (maqsvrdc0001:636)". Sent 0 entries. -- ========================================== Emmanuel BILLOT IRD - Orl?ans D?l?gation aux Syst?mes d'Information (DSI) t?l : 02 38 49 95 88 ==========================================
