<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I see a white space between <span style="color:#1F497D">MYDOMAIN\2C
and </span><span style="color:#1F497D">dc\3Dcom in the agreement
DN. </span>Basically, it should have been automatically
removed. <br>
<br>
<span style="color:#1F497D">dn: cn=389 to
analog,cn=replica,cn=dc\3DMYDOMAIN\2C dc\3Dcom,cn=mapping
tree,cn=config</span><br>
<pre wrap="">[13/Mar/2012:11:31:12 -0400] NSMMReplicationPlugin - agmtlist_add_callback: Can't start agreement "cn=389-01 to analog-01v,cn=replica,cn=dc\3dMYDOMAIN\2c dc\3dcom,cn=mapping tree,cn=config"
Could you try removing the white space (by editing your dse.ldif)?
1. shutdown the server
2. edit /etc/dirsrv/slapd-YOURID/dse.ldif
<span style="color:#1F497D">dn: cn=389 to analog,cn=replica,cn=dc\3DMYDOMAIN\2C dc\3Dcom,cn=mapping tree,cn=config</span>
==>
<span style="color:#1F497D"> dn: cn=389 to analog,cn=replica,cn=dc\3DMYDOMAIN\2Cdc\3Dcom,cn=mapping tree,cn=config</span>
3. restart the server
</pre>
<a class="moz-txt-link-abbreviated" href="mailto:mjames@guesswho.com">mjames@guesswho.com</a> wrote:
<blockquote
cite="mid:2AA600764E54964491083B1E0EC81A30C47EF32E90@EXCLUS.nationala-1advertising.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Times New Roman \, serif";
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New","serif";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Looks like
this:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">[root@x-web-389-01
~]# ldapsearch -xLLL -D "cn=directory manager" -W -b
cn=config "cn=389 to
analog"
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Enter LDAP
Password:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">dn: cn=389 to
analog,cn=replica,cn=dc\3DMYDOMAIN\2C dc\3Dcom,cn=mapping
tree,cn=config<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">objectClass:
top<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">objectClass:
nsDS5ReplicationAgreement<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">description:
x-web-389-01 to x-analog-01<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">cn: 389 to
analog<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaRoot:
dc=MYDOMAIN,dc=com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaHost:
x-analog-01.MYDOMAIN.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaPort:
389<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaBindDN:
cn=repman,cn=config<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaTransportInfo:
LDAP<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaBindMethod:
SIMPLE<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsDS5ReplicaCredentials:
{DES}/DnkVyIX/let6epFs+gfjw==<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds50ruv:
{replicageneration} 4eb7e52b000000010000<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds50ruv:
{replica 2 <a class="moz-txt-link-freetext" href="ldap://x-analog-01.MYDOMAIN.com:389">ldap://x-analog-01.MYDOMAIN.com:389</a>}
4ec1600f000000020000 4ec29e53000000020000<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds50ruv:
{replica 1 <a class="moz-txt-link-freetext" href="ldap://x-web-389-01.MYDOMAIN.com:389">ldap://x-web-389-01.MYDOMAIN.com:389</a>}
4ec116e4000000010000 4f329c1c000100010000<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsruvReplicaLastModified:
{replica 2 <a class="moz-txt-link-freetext" href="ldap://x-analog-01.MYDOMAIN.com:389">ldap://x-analog-01.MYDOMAIN.com:389</a>} 00000000<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsruvReplicaLastModified:
{replica 1 <a class="moz-txt-link-freetext" href="ldap://x-web-389-01.MYDOMAIN.com:389">ldap://x-web-389-01.MYDOMAIN.com:389</a>} 00000000<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicareapactive:
0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaLastUpdateStart:
0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaLastUpdateEnd:
0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaChangesSentSinceStartup:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaLastUpdateStatus:
0 No replication sessions started since server startup<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaUpdateInProgress:
FALSE<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaLastInitStart:
0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">nsds5replicaLastInitEnd:
0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
Rich Megginson [<a class="moz-txt-link-freetext" href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>] <br>
<b>Sent:</b> Tuesday, March 13, 2012 12:24 PM<br>
<b>To:</b> General discussion list for the 389 Directory
server project.<br>
<b>Cc:</b> Michael James<br>
<b>Subject:</b> Re: [389-users] LDAP server is unwilling
to perform<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On 03/13/2012 10:23 AM, <a
moz-do-not-send="true" href="mailto:mjames@guesswho.com">mjames@guesswho.com</a>
wrote: <o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Sorry, forgot
to send this to the list.</span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Times New
Roman","serif"">There appears to be something
wrong with your replication agreement entry, but I have no
idea what. That information should be in the logs but it is
not. Can you post your replication agreement entry to the
list?<br>
<br>
ldapsearch -xLLL -D "cn=directory manager" -W -b cn=config
"cn=389 to analog"<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
Michael James <br>
<b>Sent:</b> Tuesday, March 13, 2012 12:13 PM<br>
<b>To:</b> 'Rich Megginson'<br>
<b>Subject:</b> RE: [389-users] LDAP server is unwilling
to perform</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">That’s a big *<b>IF</b>*
there… I did turn up the logging. Attached is the error log,
trimmed to around the time that I tried to create the new
replication agreement. Sorry about that.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
Rich Megginson <a moz-do-not-send="true"
href="mailto:[mailto:rmeggins@redhat.com]">[mailto:rmeggins@redhat.com]</a>
<br>
<b>Sent:</b> Tuesday, March 13, 2012 11:51 AM<br>
<b>To:</b> General discussion list for the 389 Directory
server project.<br>
<b>Cc:</b> Michael James<br>
<b>Subject:</b> Re: [389-users] LDAP server is unwilling
to perform</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 03/13/2012 09:41 AM, <a
moz-do-not-send="true" href="mailto:mjames@guesswho.com">mjames@guesswho.com</a>
wrote: <o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Pls see
attached new console.log. Thanks.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt;font-family:"Times New Roman ,
serif","serif"">If you follow the directions
at </span><span style="font-size:12.0pt"><a
moz-do-not-send="true"
href="http://port389.org/wiki/FAQ#Troubleshooting">http://port389.org/wiki/FAQ#Troubleshooting</a>
to enable the Replication log level, the extra information
will be in the directory server errors log, not the console
log - /var/log/dirsrv/slapd-INST/errors</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Mike</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
Rich Megginson [<a moz-do-not-send="true"
href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>]
<br>
<b>Sent:</b> Monday, March 12, 2012 3:14 PM<br>
<b>To:</b> General discussion list for the 389 Directory
server project.<br>
<b>Cc:</b> Michael James<br>
<b>Subject:</b> Re: [389-users] LDAP server is unwilling
to perform</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 03/12/2012 12:39 PM, <a
moz-do-not-send="true" href="mailto:mjames@guesswho.com">mjames@guesswho.com</a>
wrote: <o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Pls. see
attached. Thx.</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt">Hmm - nothing to go on there -
please turn on the Replication log level and reproduce the
problem - then the errors log may contain more clues<br>
<a moz-do-not-send="true"
href="http://port389.org/wiki/FAQ#Troubleshooting">http://port389.org/wiki/FAQ#Troubleshooting</a><br>
<br>
<br>
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">Mike</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span
style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">
Rich Megginson [<a moz-do-not-send="true"
href="mailto:rmeggins@redhat.com">mailto:rmeggins@redhat.com</a>]
<br>
<b>Sent:</b> Monday, March 12, 2012 1:30 PM<br>
<b>To:</b> General discussion list for the 389 Directory
server project.<br>
<b>Cc:</b> Michael James<br>
<b>Subject:</b> Re: [389-users] LDAP server is unwilling
to perform</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">On 03/12/2012 11:30 AM, <a
moz-do-not-send="true" href="mailto:mjames@guesswho.com">mjames@guesswho.com</a>
wrote: <o:p></o:p></p>
<p class="MsoNormal">Thanks for your previous help. I built a
new server, CentOS 6.2, added the epel-389-ds-base and epel
repos, then installed 389-ds via yum. I ran setup-ds-admin.pl
with the “Typical” setup option, user nobody, and registered
with one of our existing configuration servers. I created the
supplier bind DN on the new server per the installation docs.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">At this point, I can’t establish a
replication agreement. I open the 389-console on existing
server and use the GUI to create a new replication agreement
on userRoot. I accepted the defaults, entered the correct bind
DN and password. At the end of the wizard, it fails with “LDAP
server is unwilling to perform”. In the error log, I see one
error. Any help is appreciated. Thanks, Mike<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt">Can you run the console with -D 9
-f console.log, reproduce the problem, remove any sensitive
information from console.log, and post console.log to this
list?<br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">[12/Mar/2012:13:26:46 -0400]
NSMMReplicationPlugin - agmtlist_add_callback: Can't start
agreement "cn=389 to
analog-01v,cn=replica,cn=dc\3d<MY_DOMAIN>\2c
dc\3dcom,cn=mapping tree,cn=config"<o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt"><br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<pre>--<o:p></o:p></pre>
<pre>389 users mailing list<o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></pre>
<p class="MsoNormal"><span style="font-size:12.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:12.0pt;font-family:"Times New Roman ,
serif","serif""><br>
<br>
<br>
</span><o:p></o:p></p>
<pre>--<o:p></o:p></pre>
<pre>389 users mailing list<o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></pre>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Times New Roman ,
serif","serif""> </span><o:p></o:p></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Times New
Roman","serif""><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>--<o:p></o:p></pre>
<pre>389 users mailing list<o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><o:p></o:p></pre>
<pre><a moz-do-not-send="true" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><o:p></o:p></pre>
<p class="MsoNormal"><span
style="font-size:12.0pt;font-family:"Times New
Roman","serif""><o:p> </o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</body>
</html>