On 08/31/2011 08:45 AM, David Hoskinson wrote:
I have setup 2 servers running the following versions of 389 Directory
I have also enabled ssl and created the appropriate certs for each
machine. I am able to set each machine as a client so I can test that
from server A, I can login to server A while being authenticated by
server B and vice versa.
The last problem that I seem to be having is setting up replication.
I have enabled the changelog, created a replication account, and
enabled replica. When I create my replication agreement on the
userRoot, the supplier shows as server A port 389 and the consumer
shows as server B 636. I am using Use TLS with ldaps, and simple bind
with my replication account and password. I next leave enable
fractional replication unchecked, always keep directories in sync and
initialize consumer... this is on server A and done. I get the
following error message. Consumer initialization has unsuccessfully
completed. The error received by the replica is '81 -- LDAP error:
Can't contact LDAP server'
I believe I am reading that in some manner the cacert.asc from server
A has to be on server B and the cacert B has to be on server A
but am not sure and having problems with this.
Any help with this would be appreciated and can provide additional
information if needed...
David Hoskinson | *DATATRAK*International
Mayfield Heights, Ohio, USA
+1.440.443.0082 x 124 (p) | +1.319.471.3689 (m)
david.hoskinson(a)datatrak.net <mailto:email@example.com> |
389 users mailing list