Setting up Multiple Directory Servers - in a multi-master mesh. Having problems with admin server.

[Howard Wilkinson <howard@xxxxxxxxxxx>]

We are configuring a new site which has a pair of Master servers and 2 "slave" servers. We have followed the following sequence of steps but have fallen at the last fence in getting all of the servers registered with admin servers.

Install fresh copies of fedora-ds* 1.1 packages.
Run setup-ds-admin.pl on the primary master (primary because it is the first one)
Setup SSL access to server
Create ROOTDNs.
Populate server with initial data.

Run setup-ds.pl on the secondary master and the 2 slaves.
Setup SSL access on these servers
Create ROOTDNs
Initiate multi-master replication for all roots from primary master to secondary master.
Initiate ordinary replication from the primary master to each slave.
Initiate ordinary replication from the secondary master to each slave.

We are replicating o=NetscapeRoot as well as all of our Roots.

The servers are setup using this inf file.

[General]

FullMachineName=${HOSTNAMEFQDN}

SuiteSpotUserID=${LDAPUID}

SuiteSpotGroup=${LDAPGID}

ServerRoot=/usr/lib/fedora-ds

AdminDomain=${MASTERDOMAIN}

ConfigDirectoryAdminID=admin

ConfigDirectoryAdminPwd=${ADMINPASSWD}

ConfigDirectoryLdapURL=ldap://${MASTERHOSTFQDN}:${LDAPPORT}/o=NetscapeRoot

UserDirectoryAdminID=admin

UserDirectoryAdminPwd=${ADMINPASSWD}

UserDirectoryLdapURL=ldap://${HOSTNAMEFQDN}:${LDAPPORT}/${MASTERDN}

#CACertificateURL=

[slapd]

SlapdConfigForMC=${SlapdConfigForMC} # Set to 1 on Master, 0 on all others

SecurityOn=No

UseExistingMC=${UseExistingMC} # Set to 0 on Master, 1 on all others

UseExistingUG=0

ServerPort=${LDAPPORT}

ServerIdentifier=${HOSTNAME}

Suffix=dc=${MASTERDN}

RootDN=cn=Directory Manager

AddSampleEntries=No

InstallLdifFile=none

AddOrgEntries=No

DisableSchemaChecking=No

RootDNPwd=${DIRMANPASSWD}

start_server=1

install_full_schema=1

[admin]

SysUser=${LDAPUID}

Port=${ADMINPORT}

ServerIpAddress=*

ServerAdminID=admin

ServerAdminPwd=${ADMINPASSWD}

ApacheDir=/usr/sbin/

ApacheRoot=/etc/httpd

I then run up fedora-idm-console on the master. We can see the master server in the console but cannot see any of the others!

What have we missed? What do we need to do to get this running and then switch each server over to using its local admin server (with replicated data from the master)

Note we cannot get "register-ds-admin.pl" to do anything in this environment a sit just keeps asking for the server name and any input results in it asking again for the server name.

Regards, Howard.

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users