Hi,
We use 389DS and AD with a Winsync method.
Our LDAP DIT :
* dc=toutou,dc=fr
** dc=orleans,dc=toutou,dc=fr
*** ou=people,dc=orleans,dc=toutou,dc=fr
*** ou=group,dc=orleans,dc=toutou,dc=fr
** dc=bondy,dc=toutou,dc=fr
*** ou=people,dc=bondy,dc=toutou,dc=fr
*** ou=group,dc=bondy,dc=toutou,dc=fr
Our AD DIT :
* dc=toutou,dc=org
** ou=orleans,dc=toutou,dc=org
*** ou=utilisateurs, ou=toutou, dc=ird,dc=org
*** ou=groupes, ou=toutou,dc=ird,dc=org
One can see some OU names are different, such as DIT root.
So we cretaed a sync agrement as
ou=people,dc=orleans,dc=toutou,dc=fr --- ou=utilisateurs, ou=toutou,
dc=ird,dc=org
All seems to be ok.
However, we need to sync other subtrees, like
ou=people,dc=bondy,dc=toutou,dc=fr
It seems 389DS wants to syncronize high level entries which are not
specified in the agrement. As it tries to do it for each sub agrement,
failure occurs with a duplicate value error.
How can we do ?
Log
[08/Oct/2009:15:26:31 +0200] NSMMReplicationPlugin - agmt="cn=win bdy"
(maqsvrdc0001:636): Replica has no update vector. It has never been
initialized.
[08/Oct/2009:15:26:33 +0200] NSMMReplicationPlugin - Beginning total
update of replica "agmt="cn=win bdy" (maqsvrdc0001:636)".
[08/Oct/2009:15:26:33 +0200] - add value "" to attribute type "ARecord"
in entry
"DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=toutou,DC=org"
failed: duplicate new value
[08/Oct/2009:15:26:34 +0200] NSMMReplicationPlugin - Finished total
update of replica "agmt="cn=win bdy" (maqsvrdc0001:636)". Sent 0 entries.
--
==========================================
Emmanuel BILLOT
IRD - Orléans
Délégation aux Systèmes d'Information (DSI)
tél : 02 38 49 95 88
==========================================
--
389 users mailing list
389-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users