Azure / Azure/azure-quickstart-templates

OpenLDAP Cluster replication failing

Open
#4,254 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Bicep
Stars
14.9k
Forks
16.2k
Avg merge
6d 21h
Merged PRs (30d)
6

Description

[openldap-cluster-ubuntu](https://github.com/Azure/azure-quickstart-templates/tree/master/openldap-cluster-ubuntu)

### Issue Details
I installed on 6 Feb 2018 and did not apply any further updates to the ubuntu virtual machines.

/var/log/syslog shows this error: slapd[7521]: slap_client_connect: URI=ldap://xxxxxxxxx DN="cn=admin,dc=xxxx,dc=xxxx,dc=cloudapp,dc=azure,dc=com" ldap_sasl_bind_s failed (13)

The 'install_openldap.sh' script in the template appends a olcSyncRepl line for each server to the 'hdb_5_addOlcSyncRepl.ldif' file before adding it. It is missing the SASL parameters.

Comparing to the config database, which replicates succesfully, it looks like the install_openldap.sh script needs to add these additional fields to each olcSyncRepl line: starttls=critical tls_reqcert=allow

Contributor guide

No contributing guide indexed for this repository

Research direction

Read the openldap-cluster-ubuntu template, starting with install_openldap.sh and the hdb_5_addOlcSyncRepl.ldif file it modifies. Compare the generated replication settings with the config database settings described in the issue, then deploy or inspect the template and confirm that OpenLDAP replication succeeds without the reported SASL bind error.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell, ubuntu
Domain
infrastructure
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.