[389-users] Question about Multi-Master Replica

Rich Megginson rmeggins at redhat.com
Wed Aug 3 18:21:35 UTC 2011


On 08/03/2011 08:09 AM, Andrea Modesto Rossi wrote:
> Hi All,
>
> i have a 389 DS installation deployed in 3 Server with MultiMaster
> Replication.
> It seems to be everything OK: if i change the password on Server A, i will
> have the same password on B and C too.
> But i have seen that there is a problem with others attributes, for
> example:  passwordRetryCount
>
> Indeed, i try to go to Server A by SSH with wrong password, then
> passwordRetryCount: 1:
>
> [rossi at ServerA ~]$ ldapsearch -x -ZZ uid=PIPPO passwordRetryCount
> # extended LDIF
> #
> # LDAPv3
> # base<>  with scope subtree
> # filter: uid=PIPPO
> # requesting: passwordRetryCount
> #
>
> # PIPPO, suppo.com
> dn: uid=PIPPO,ou=People,dc=it,dc=suppo,dc=boh
> passwordRetryCount: 1
>
> # search result
> search: 3
> result: 0 Success
>
> # numResponses: 2
> # numEntries: 1
>
>
> But, on the Server B i have "passwordRetryCount == 0" yet. In my opinion
> this fild (passwordRetryCount) is not replicated.
>
> [rossi at ServerB ~]$ ldapsearch -x -ZZ uid=PIPPO passwordRetryCount
> # extended LDIF
> #
> # LDAPv3
> # base<>  with scope subtree
> # filter: uid=PIPPO
> # requesting: passwordRetryCount
> #
>
> # PIPPO, suppo.com
> dn: uid=PIPPO,ou=People,dc=it,dc=suppo,dc=boh
>
> # search result
> search: 3
> result: 0 Success
>
> # numResponses: 2
> # numEntries: 1
>
>
> Any IDEA in order to solve this issue? maybe (i think it) should be an
> error of the Agreement policy..or not?
See 
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html-single/Administration_Guide/index.html#Managing_Replication-Replicating-Password-Attributes
>
> Please help me :-D
>
>
> have a nice day,
>




More information about the 389-users mailing list