Docker-openldap: LDAP_TLS=false but replication still requires TLS?

[tlchan]

After v1.0.9, replication is failing.

I've start a new container and a new database, and passed LDAP_TLS=false on the docker run line.

ldap1 log:

56b73cf9 slap_client_connect: URI=ldap://ldap2 Error, ldap_start_tls failed (2)
56b73cf9 slap_client_connect: URI=ldap://ldap2 Error, ldap_start_tls failed (2)
56b73cf9 do_syncrepl: rid=002 rc 2 retrying
56b73cf9 do_syncrepl: rid=102 rc 2 retrying

ldap2 log:

56b73cf9 conn=1054 fd=21 ACCEPT from IP=10.2.92.201:58790 (IP=172.17.0.30:389)
56b73cf9 conn=1054 op=0 EXT oid=1.3.6.1.4.1.1466.20037
56b73cf9 conn=1054 op=0 do_extended: unsupported operation "1.3.6.1.4.1.1466.20037"
56b73cf9 conn=1054 op=0 RESULT tag=120 err=2 text=unsupported extended operation
56b73cf9 conn=1053 fd=22 ACCEPT from IP=10.2.92.201:58792 (IP=172.17.0.30:389)
56b73cf9 conn=1053 op=0 EXT oid=1.3.6.1.4.1.1466.20037
56b73cf9 conn=1053 op=0 do_extended: unsupported operation "1.3.6.1.4.1.1466.20037"
56b73cf9 conn=1053 op=0 RESULT tag=120 err=2 text=unsupported extended operation
56b73cf9 conn=1054 op=1 UNBIND
56b73cf9 conn=1054 fd=21 closed
56b73cf9 conn=1053 op=1 UNBIND
56b73cf9 conn=1053 fd=22 closed

/container/service/slapd/assets/config/replication/replication-enable.ldif:

# Add sync replication on config
dn: olcDatabase={0}config,cn=config
changetype: modify
add: olcSyncRepl
olcSyncRepl: rid=001 provider=ldap://ldap1 binddn="cn=admin,cn=config" bindmethod=simple credentials=XXXXXXXXXX searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical
olcSyncRepl: rid=002 provider=ldap://ldap2 binddn="cn=admin,cn=config" bindmethod=simple credentials=XXXXXXXXXX searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical

[tlchan]

I don't see a tagged v1.1.1, is it the hotfix-1.1.1 branch? thx

On Feb 7, 2016, at 5:57 AM, ofreax [email protected] wrote:

Hello,
This should already be fixed in v1.1.1 the image is already available, can
you try and confirm that ? Thanks
Le 7 févr. 2016 13:54, "tlchan" [email protected] a écrit :

After v109, replication is failing

I've start a new container and a new database, and passed LDAP_TLS=false
on the docker run line

ldap1 log:

56b73cf9 slap_client_connect: URI=ldap://ldap2 Error, ldap_start_tls failed (2)
56b73cf9 slap_client_connect: URI=ldap://ldap2 Error, ldap_start_tls failed (2)
56b73cf9 do_syncrepl: rid=002 rc 2 retrying
56b73cf9 do_syncrepl: rid=102 rc 2 retrying

ldap2 log:

56b73cf9 conn=1054 fd=21 ACCEPT from IP=10292201:58790 (IP=17217030:389)
56b73cf9 conn=1054 op=0 EXT oid=136141146620037
56b73cf9 conn=1054 op=0 do_extended: unsupported operation "136141146620037"
56b73cf9 conn=1054 op=0 RESULT tag=120 err=2 text=unsupported extended operation
56b73cf9 conn=1053 fd=22 ACCEPT from IP=10292201:58792 (IP=17217030:389)
56b73cf9 conn=1053 op=0 EXT oid=136141146620037
56b73cf9 conn=1053 op=0 do_extended: unsupported operation "136141146620037"
56b73cf9 conn=1053 op=0 RESULT tag=120 err=2 text=unsupported extended operation
56b73cf9 conn=1054 op=1 UNBIND
56b73cf9 conn=1054 fd=21 closed
56b73cf9 conn=1053 op=1 UNBIND
56b73cf9 conn=1053 fd=22 closed

/container/service/slapd/assets/config/replication/replication-enableldif:

Add sync replication on config

dn: olcDatabase={0}config,cn=config
changetype: modify
add: olcSyncRepl
olcSyncRepl: rid=001 provider=ldap://ldap1 binddn="cn=admin,cn=config" bindmethod=simple credentials=XXXXXXXXXX searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical
olcSyncRepl: rid=002 provider=ldap://ldap2 binddn="cn=admin,cn=config" bindmethod=simple credentials=XXXXXXXXXX searchbase="cn=config" type=refreshAndPersist retry="60 +" timeout=1 starttls=critical

—
Reply to this email directly or view it on GitHub
https://github.com/osixia/docker-openldap/issues/33.

—
Reply to this email directly or view it on GitHub.

[tlchan]

Closing as v1.1.1 resolved the issue. Thanks!

[xiaooloong]

same problem using verqion 1.4.0