On 01/14/2011 10:32 AM, Brian LaMere wrote: > Odd, I got MMR working with SSL...and I only referenced that documentation which documentation? > (well, and assistance from this list and the IRC room...). It was > 1.2.6, but surely that didn't really change things? It hasn't changed between 1.2.6 and 1.2.7 > > Sounds like everyone is agreeing (even if indirectly) that the > documentation is outdated though Which documentation? > - is it due to work focusing on FreeIPA? Some say good software with > bad documentation is worse than bad software with good > documentation...I'm a hands-on guy so I would disagree, but I do see > the point none the less. > > I did make a few howtos for internal use, covering everything from > setting up the first server, getting SSL working, getting replication > working, then getting OSX and Linux hosts pulling from the mess. They > were docs meant for me to read (complete with the shorthand and > shortcuts that I understand) but if you have problems then let me know > and I'll see what I can clean up. As it so happens, I'm setting up an > all new MMR 389 pair in the next few days (our company is somewhat > splitting, and I don't want to have it be different trees on the same > directory)...so I'll know pretty quick if something has changed the > last half-year. Hell, if you were maybe going to be working on it in > the next few days anyway, we can sortof step through it together > online - just let me know. I have mmr.pl in my private github repo - if anyone wants to send me patches, I will push them. > > Brian > > On Tue, Jan 11, 2011 at 1:14 PM, crashingdaily > <crashingdaily at gmail.com <mailto:crashingdaily at gmail.com>> wrote: > > On Jan 11, 2011, at 3:50 PM, Rich Megginson wrote: > > > On 01/11/2011 01:40 PM, harry.devine at faa.gov > <mailto:harry.devine at faa.gov> wrote: > >> > >> We just ran the mmr.pl <http://mmr.pl> script from server 1, > and the data got > >> replicated across to server 2. If we create a new user on server > >> 2, it does not get replicated to server 1. It appears to be a 1 > >> way replication. > > mmr.pl <http://mmr.pl> has bit rotted - no one maintains it any > more - you're on > > your own if you decide to use it - patches/maintainer welcome > > > I've successfully used mmr.pl <http://mmr.pl> (last time with 389 > 1.2.6.1). I would > try restarting your two 389 instances, and if that doesn't magically > fix it, use the mmr.pl <http://mmr.pl> script to --remove the > existing replication > agreement and then add it back while keeping an eye on the 389 logs > for errors. I've had rare cases where I've had to run mmr.pl > <http://mmr.pl> twice to > get it to take. > > The --with-ssl option was broken in the last version I used (but > that's clearly not the cause of Harry's issue). For working patched > version, should you want SSL replication, see > http://crashingdaily.wordpress.com/2010/11/13/fixing-the-mmr-pl-script-for-ssl/ > > > > >> > >> Any thoughts? > >> Harry > >> > >> Harry Devine > >> Common ARTS Software Development > >> AJT-144 > >> (609)485-4218 > >> Harry.Devine at faa.gov <mailto:Harry.Devine at faa.gov> > >> > >> -----Rich Megginson <rmeggins at redhat.com > <mailto:rmeggins at redhat.com>> wrote: ----- > >> > >> To: "General discussion list for the 389 Directory server project." > >> <389-users at lists.fedoraproject.org > <mailto:389-users at lists.fedoraproject.org>> > >> From: Rich Megginson <rmeggins at redhat.com > <mailto:rmeggins at redhat.com>> > >> Date: 01/11/2011 03:09PM > >> cc: Harry Devine/ACT/FAA at FAA, Ted Rush/ACT/FAA at FAA > >> Subject: Re: Replication > >> > >> On 01/11/2011 12:53 PM, harry.devine at faa.gov > <mailto:harry.devine at faa.gov> wrote: > >>> > >>> OK, so we are testing 389-ds in our environment (version > >>> 1.2.7.5). We have 1 machine set up with user accounts, and we > >>> just set another one up. The new one doesn't have any accounts or > >>> anything on it yet. We would like to get replication going > >>> between the 2 DS's, but can't find any current documention on how > >>> to do it. When we set up the 2nd machine, we set it up as if it > >>> were its own DS (i.e. not tied into the existing one). Not sure > >>> it that is relevant, but I thought I'd mention it for full > >>> disclosure. > >> Should not be a problem. > >>> > >>> We'd like to have this be a 2-way multi-master replication, so if > >>> our main DS server ever went down, the 2nd one could pick up and > >>> service login requests. Is there any current documention that > >>> explains this anywhere? > >> > >> > http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#Managing_Replication > >>> Is multi-master the correct method to use for this type of setup? > >> Yes. > >>> > >>> Thanks, > >>> Harry > >>> > >>> Harry Devine > >>> Common ARTS Software Development > >>> AJT-144 > >>> (609)485-4218 > >>> Harry.Devine at faa.gov <mailto:Harry.Devine at faa.gov> > >>> > >>> -- > >>> 389 users mailing list > >>> 389-users at lists.fedoraproject.org > <mailto:389-users at lists.fedoraproject.org> > >>> https://admin.fedoraproject.org/mailman/listinfo/389-users > >> > >> > > > > -- > > 389 users mailing list > > 389-users at lists.fedoraproject.org > <mailto:389-users at lists.fedoraproject.org> > > https://admin.fedoraproject.org/mailman/listinfo/389-users > > -- > 389 users mailing list > 389-users at lists.fedoraproject.org > <mailto:389-users at lists.fedoraproject.org> > https://admin.fedoraproject.org/mailman/listinfo/389-users > > > > -- > 389 users mailing list > 389-users at lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/389-users -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20110114/7e4a7fd1/attachment.html