openldap2.4.23同步推拉应用问题

littleline

想将389 端口的LDAP，O=JS,ST=test,C=CN,推到端口289的LDAP,O=JS,ST=test,C=CN

有推的方式，主配置如下：端口389，cn=admin,O=JS,ST=test,C=CN
################推
# syncrepl Provider for primary db
overlay syncprov
syncprov-checkpoint 1000 60
syncprov-sessionlog 100

# Let the replica DN have limitless searches
#limits dn.exact="cn=Manager,dc=example,dc=com" time.soft=unlimited time.hard=database monitor
#database config
rootpw 111111
##############################################################################
# Consumer Proxy that pulls in data via Syncrepl and pushes out via slapd-ldap
##############################################################################
database ldap
# ignore conflicts with other databases, as we need to push out to same suffix
hidden on
suffix "O=JS,ST=test,C=CN"
rootdn "cn=admin,O=JS,ST=JS,C=CN"
uri ldap://localhost:289/
lastmod on
# We don't need any access to this DSA
restrict all

acl-bind bindmethod=simple
        binddn="cn=admin,O=ZJ,ST=test,C=CN"
        credentials=111111

syncrepl rid=001
        provider=ldap://localhost:389/
        binddn="cn=admin,O=JS,ST=test,C=CN"
        bindmethod=simple
        credentials=111111
        searchbase="O=JS,ST=JS,C=CN"
        type=refreshAndPersist
        retry="5 5 300 5"
overlay syncprov



从机:289端口，cn=admin,O=ZJ,ST=test,C=CN
############推
# Let the replica DN have limitless searches
#limits dn.exact="cn=Manager,dc=example,dc=com" time.soft=unlimited time.hard=unlimited
# Refer updates to the master
updatedn "cn=admin,O=JS,ST=test,C=CN"

updateref ldap://localhost:389

#database monitor
#database config
rootpw 11111



*****************************
现在推不成功，主机端报错如下：

conn=1001 fd=12 ACCEPT from IP=127.0.0.1:45482 (IP=0.0.0.0:20001)
conn=1001 op=0 BIND dn="cn=admin,o=js,st=test,c=cn" method=128
conn=1001 op=0 BIND dn="cn=admin,o=js,st=test,c=cn" mech=SIMPLE ssf=0
conn=1001 op=0 RESULT tag=97 err=0 text=
conn=1001 op=1 SRCH base="o=js,st=test,c=cn" scope=2 deref=0 filter="(objectClass=*)"
conn=1001 op=1 SRCH attr=* +
null_callback : error code 0x34
syncrepl_entry: rid=001 be_add o=JS,st=test,c=CN failed (52)
do_syncrepl: rid=001 rc 52 retrying (4 retries left)
conn=1001 op=2 UNBIND
conn=1001 fd=12 closed
connection_read(12): no connection!
connection_read(12): no connection!
daemon: shutdown requested and initiated.
slapd shutdown: waiting for 0 operations/tasks to finish
slapd stopped.




可以像我上面想的这么推吗？如果可以， 是不是上述思路和方法有问题。。。。。。。非常感谢！

littleline

同结点，条目，不同端口，已经同步实现，现在想做不同结点的同步。