Can you contact the server directly with ldapwhoami ? Does that show similar errors? Can't contact ldap server can mean multiple things from wrong ip, wrong port, invalid cert, cert hostname mismatch, etc. So it's not a good error. > On 21 Jul 2023, at 23:34, Ghiurea, Isabella <Isabella.Ghiurea@xxxxxxxxxxxxxx> wrote: > > Hi List, > we are running an old ldap version and having issues running fixup-memberof.pl script in master-slave cfg fractional replication with member off excluded , can not create index locally. I tried using different protocols when invoking the script :LDAPS, STARTTLS but same error . Any idea what can be the cause of this issue? > > Here are details : > > 389-ds-base-libs-1.3.7.5-24.el7_5.x86_64 > 389-ds-base-1.3.7.5-24.el7_5.x86_64 > /usr/lib64/dirsrv/slapd-sldapX/fixup-memberof.pl -D "cn=Directory Manager" -w - -b "dc=XXX,dc=net" > Bind Password: > ldap_start_tls: Can't contact LDAP server (-1) > Failed to add task entry "cn=memberOf_fixup_2023_7_20_11_59_27, cn=memberOf task, cn=tasks, cn=config" error :ldap-ds > > /usr/lib64/dirsrv/slapd-sldapX/fixup-memberof.pl -D "cn=Directory Manager" -w - -b "dc =XXX,dc=net" -Z host_name -P LDAPS > Bind Password: > ldap_start_tls: Can't contact LDAP server (-1) > Failed to add task entry "cn=memberOf_fixup_2023_7_20_11_52_44, cn=memberOf task, cn=tasks, cn=config" error (1) > > Thank you > Isabella > _______________________________________________ > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx > Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE Labs, Australia _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue