Azure / Azure/azure-quickstart-templates
OpenLDAP Cluster replication failing
- Dominant language
- Bicep
- Stars
- 14.9k
- Forks
- 16.2k
- Avg merge
- 6d 21h
- Merged PRs (30d)
- 6
Description
[openldap-cluster-ubuntu](https://github.com/Azure/azure-quickstart-templates/tree/master/openldap-cluster-ubuntu)
### Issue Details
I installed on 6 Feb 2018 and did not apply any further updates to the ubuntu virtual machines.
/var/log/syslog shows this error: slapd[7521]: slap_client_connect: URI=ldap://xxxxxxxxx DN="cn=admin,dc=xxxx,dc=xxxx,dc=cloudapp,dc=azure,dc=com" ldap_sasl_bind_s failed (13)
The 'install_openldap.sh' script in the template appends a olcSyncRepl line for each server to the 'hdb_5_addOlcSyncRepl.ldif' file before adding it. It is missing the SASL parameters.
Comparing to the config database, which replicates succesfully, it looks like the install_openldap.sh script needs to add these additional fields to each olcSyncRepl line: starttls=critical tls_reqcert=allow
Contributor guide
No contributing guide indexed for this repository
Research direction
Read the openldap-cluster-ubuntu template, starting with install_openldap.sh and the hdb_5_addOlcSyncRepl.ldif file it modifies. Compare the generated replication settings with the config database settings described in the issue, then deploy or inspect the template and confirm that OpenLDAP replication succeeds without the reported SASL bind error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell, ubuntu
- Domain
- infrastructure
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 25/100