[389-users] ACI's not replicating

[Rich Megginson]

Terry Soucy wrote:
> Running 389-server 1.2.5 on RHEL 5 (Intel)
>
> We have a single master replicating to two consumers.  When I update the 
> ACIs on the master using ldapmodify, the ACIs are applied to the 
> supplier without error ...
>
> [31/Aug/2010:09:18:37 -0300] conn=100572906 fd=81 slot=81 connection 
> from 131.202.5.14 to 131.202.5.15
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=0 BIND dn="cn=directory 
> manager" method=128 version=3
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=0 RESULT err=0 tag=97 
> nentries=0 etime=0 dn="cn=directory manager"
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=1 MOD dn="dc=unb,dc=ca"
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=1 RESULT err=0 tag=103 
> nentries=0 etime=0 csn=4c7cf31d000000010000
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=2 UNBIND
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=2 fd=81 closed - U1
>
> One the consumer, I get the following ...
>
> [31/Aug/2010:09:18:36 -0300] conn=30854964 fd=66 slot=66 connection from 
> 131.202.5.15 to 131.202.5.14
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=0 BIND dn="cn=replication 
> manager, cn=config" method=128 version=3
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=0 RESULT err=0 tag=97 
> nentries=0 etime=0 dn="cn=replication manager,cn=config"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=1 SRCH base="" scope=0 
> filter="(objectClass=*)" attrs="supportedControl supportedExtension"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=1 RESULT err=0 tag=101 
> nentries=1 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=2 SRCH base="" scope=0 
> filter="(objectClass=*)" attrs="supportedControl supportedExtension"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=2 RESULT err=0 tag=101 
> nentries=1 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=3 EXT 
> oid="2.16.840.1.113730.3.5.3" name="Netscape Replication Start Session"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=3 RESULT err=0 tag=120 
> nentries=0 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=4 SRCH 
> base="cn=replica,cn=\22dc=unb,dc=ca\22,cn=mapping tree,cn=config" 
> scope=0 filter="(objectClass=*)" attrs="nsDS5ReplicaId"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=4 RESULT err=32 tag=101 
> nentries=0 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=5 MOD dn="dc=unb,dc=ca"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=5 RESULT err=0 tag=103 
> nentries=0 etime=0 csn=4c7cf31d000000010000
> [31/Aug/2010:09:18:38 -0300] conn=30854964 op=6 EXT 
> oid="2.16.840.1.113730.3.5.5" name="Netscape Replication End Session"
> [31/Aug/2010:09:18:38 -0300] conn=30854964 op=6 RESULT err=0 tag=120 
> nentries=0 etime=0
> [31/Aug/2010:09:19:38 -0300] conn=30854964 op=7 UNBIND
> [31/Aug/2010:09:19:38 -0300] conn=30854964 op=7 fd=66 closed - U1
>
> Of particular interest is the err=32 on the search for the 
> nsDS5ReplicaId.  All other replication, including schema, is working as 
> expected.  For some reason, just the ACI won't replicate.  Any thoughts?
>   
I don't think the nsDS5ReplicaId is related to the ACIs not replicating.

Are all of the servers/consumers running 1.2.5?

What are you using to test and verify aci replication i.e. exact command 
and command line arguments?
> Terry
>