Openldap config modify tls error
 

Hello All,

I have two servers, a master and a slave.

I am trying to get them to replicate over tls. I have followed everything in this guide 'https://help.ubuntu.com/14.04/serverguide/openldap-server.html#openldap-server-replication' but when I attempt to run the sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f consumer_sync_tls.ldif command I get the following error:

modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Other (e.g., implementation specific) error (80) additional info: Error: parse_syncrepl_line: unable to parse "bindmethod=simplebinddn=cn=admin,dc=master,dc=com "

Here is a copy of my .ldif

dn: olcDatabase={1}hdb,cn=config replace: olcSyncRepl olcSyncRepl: rid=001 provider=ldap://master:389 bindmethod=simple binddn="cn=admin,dc=master,dc=com" credentials=123456 searchbase="dc=master,dc=com" logbase="cn=accesslog" logfilter="(&(objectClass=auditWriteObject)(reqRes ult=0))" schemachecking=on type=refreshAndPersist retry="60 +" syncdata=accesslog starttls=critical tls_reqcert=demand

Any help will be greatly appreciated!

You are way ahead of me. I did try to look at the command vs the man page and compare;

-H ldapi:///

-H ldapuri
Specify URI(s) referring to the ldap server(s); only the proto-
col/host/port fields are allowed; a list of URI, separated by
whitespace or commas is expected.

Now you maybe hiding whats really here for security reasons or something isn't quite right.

Error: parse_syncrepl_line: unable to parse "bindmethod=simplebinddn=cn=admin,dc=master,dc=com "
*^
there is a space here that doesn't appear in the .ldif (maybe nothing important)

As quickly as this fails, it looks an awful lot like it can't find the uri you have given it.

Lastly, what happens if you do this as root, not, sudo.

Figure another pair of eyes sometimes helps........

Kevin

I figured out what the problem was,

'modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Other (e.g., implementation specific) error (80) additional info: Error: parse_syncrepl_line: unable to parse "bindmethod=simplebinddn=cn=admin,dc=master,dc=com "'

There needed to be a space between "bindmethod=simple binddn=cn=admin,dc=master,dc=com ". The documentation may be fixed now as I reporte this as a bug to ubuntu. Thank you for the comment.