Terry Soucy wrote:

Running 389-server 1.2.5 on RHEL 5 (Intel)

We have a single master replicating to two consumers. When I update the ACIs on the master using ldapmodify, the ACIs are applied to the supplier without error ...

[31/Aug/2010:09:18:37 -0300] conn=100572906 fd=81 slot=81 connection from 131.202.5.14 to 131.202.5.15 [31/Aug/2010:09:18:37 -0300] conn=100572906 op=0 BIND dn="cn=directory manager" method=128 version=3 [31/Aug/2010:09:18:37 -0300] conn=100572906 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager" [31/Aug/2010:09:18:37 -0300] conn=100572906 op=1 MOD dn="dc=unb,dc=ca" [31/Aug/2010:09:18:37 -0300] conn=100572906 op=1 RESULT err=0 tag=103 nentries=0 etime=0 csn=4c7cf31d000000010000 [31/Aug/2010:09:18:37 -0300] conn=100572906 op=2 UNBIND [31/Aug/2010:09:18:37 -0300] conn=100572906 op=2 fd=81 closed - U1

One the consumer, I get the following ...

[31/Aug/2010:09:18:36 -0300] conn=30854964 fd=66 slot=66 connection from 131.202.5.15 to 131.202.5.14 [31/Aug/2010:09:18:36 -0300] conn=30854964 op=0 BIND dn="cn=replication manager, cn=config" method=128 version=3 [31/Aug/2010:09:18:36 -0300] conn=30854964 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=replication manager,cn=config" [31/Aug/2010:09:18:36 -0300] conn=30854964 op=1 SRCH base="" scope=0 filter="(objectClass=*)" attrs="supportedControl supportedExtension" [31/Aug/2010:09:18:36 -0300] conn=30854964 op=1 RESULT err=0 tag=101 nentries=1 etime=0 [31/Aug/2010:09:18:36 -0300] conn=30854964 op=2 SRCH base="" scope=0 filter="(objectClass=*)" attrs="supportedControl supportedExtension" [31/Aug/2010:09:18:36 -0300] conn=30854964 op=2 RESULT err=0 tag=101 nentries=1 etime=0 [31/Aug/2010:09:18:36 -0300] conn=30854964 op=3 EXT oid="2.16.840.1.113730.3.5.3" name="Netscape Replication Start Session" [31/Aug/2010:09:18:36 -0300] conn=30854964 op=3 RESULT err=0 tag=120 nentries=0 etime=0 [31/Aug/2010:09:18:36 -0300] conn=30854964 op=4 SRCH base="cn=replica,cn=\22dc=unb,dc=ca\22,cn=mapping tree,cn=config" scope=0 filter="(objectClass=*)" attrs="nsDS5ReplicaId" [31/Aug/2010:09:18:36 -0300] conn=30854964 op=4 RESULT err=32 tag=101 nentries=0 etime=0 [31/Aug/2010:09:18:36 -0300] conn=30854964 op=5 MOD dn="dc=unb,dc=ca" [31/Aug/2010:09:18:36 -0300] conn=30854964 op=5 RESULT err=0 tag=103 nentries=0 etime=0 csn=4c7cf31d000000010000 [31/Aug/2010:09:18:38 -0300] conn=30854964 op=6 EXT oid="2.16.840.1.113730.3.5.5" name="Netscape Replication End Session" [31/Aug/2010:09:18:38 -0300] conn=30854964 op=6 RESULT err=0 tag=120 nentries=0 etime=0 [31/Aug/2010:09:19:38 -0300] conn=30854964 op=7 UNBIND [31/Aug/2010:09:19:38 -0300] conn=30854964 op=7 fd=66 closed - U1

Of particular interest is the err=32 on the search for the nsDS5ReplicaId. All other replication, including schema, is working as expected. For some reason, just the ACI won't replicate. Any thoughts?

I don't think the nsDS5ReplicaId is related to the ACIs not replicating.

Are all of the servers/consumers running 1.2.5?

What are you using to test and verify aci replication i.e. exact command and command line arguments?

Terry