[389-users] [fedora-directory-users] NSMMReplicationPlugin messages in errors log

[Rich Megginson]

Mike Mercier wrote:
> Hello,
>
> I am getting the following error on both ends of a replication
> agreement.  The replication agreement is for the fedora dogtag CA
> application.
> Note: I had to manually do a few things to get it to work, the
> automated cloning was failing to setup the replication agreement.
>
> NSMMReplicationPlugin - repl_set_mtn_referrals: could not set
> referrals for replica dc=<dogtag dc>: 1
>   
Looks like some sort of timing thing - like the server has not been 
fully started yet or fully set up yet before it receives the replication 
request from the other master
> Note: Dogtag and fedora-ds are running on the same systems:
>
> Server-1 - fedora-ds and dogtag
> Server-2 - fedora-ds and dogtag clone
>
> Replication agreements between the systems for:
> o=NetscapeRoot
> userRoot
> dogtag dc
>
> The error *only* appears for the dogtag dc.
>
> In my dse.ldif, I do notice that there is only one nsslapd-referral
> for the dogtag dc (for server-1 to server-2)
>
> Server-1
>
> dn: cn="dc=<dogtag dc>",cn=mapping tree, cn=config
> objectClass: top
> objectClass: extensibleObject
> objectClass: nsMappingTree
> cn: dc=<dogtag dc>
> cn: "dc=<dogtag dc>"
> nsslapd-backend: pki
> nsslapd-state: Backend
> creatorsName: cn=directory manager
> modifiersName: cn=server,cn=plugins,cn=config
> createTimestamp: 20090520160944Z
> modifyTimestamp: 20090520162351Z
> nsslapd-referral: ldap://server-2.internaldomain:389/dc%3D<dogtag dc>
> numSubordinates: 1
>
> Server-2
> dn: cn="dc=<dogtag dc>",cn=mapping tree, cn=config
> objectClass: top
> objectClass: extensibleObject
> objectClass: nsMappingTree
> cn: dc=<dogtag dc>
> cn: "dc=<dogtag dc>"
> nsslapd-backend: pki
> nsslapd-state: Backend
> creatorsName: cn=directory manager
> modifiersName: cn=server,cn=plugins,cn=config
> createTimestamp: 20090520165422Z
> modifyTimestamp: 20090520180434Z
> numSubordinates: 1
>
>
> Searching google doesn't really point to an explanation (or solution)
> to the error messages.
> Is it safe to do an ldapmodify to add the entry on Server-2?
>   
Yes, although the replication code is supposed to set that 
automatically, and may overwrite it.
> Thanks,
> Mike
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20090520/cdd0adbe/attachment.bin>