From users-return-4668-apmail-directory-users-archive=directory.apache.org@directory.apache.org Fri May 11 10:29:39 2012 Return-Path: X-Original-To: apmail-directory-users-archive@www.apache.org Delivered-To: apmail-directory-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 6C29FCFB0 for ; Fri, 11 May 2012 10:29:39 +0000 (UTC) Received: (qmail 49381 invoked by uid 500); 11 May 2012 10:29:39 -0000 Delivered-To: apmail-directory-users-archive@directory.apache.org Received: (qmail 49212 invoked by uid 500); 11 May 2012 10:29:39 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Received: (qmail 49187 invoked by uid 99); 11 May 2012 10:29:38 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 11 May 2012 10:29:38 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of houmles@gmail.com designates 209.85.214.50 as permitted sender) Received: from [209.85.214.50] (HELO mail-bk0-f50.google.com) (209.85.214.50) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 11 May 2012 10:29:29 +0000 Received: by bkcjg9 with SMTP id jg9so2844727bkc.37 for ; Fri, 11 May 2012 03:29:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=qujKmIe/KO+S5nV7wc0zizJw3R6Hz7V/SDCrd7p45BA=; b=mR8TrnOTZBsqmvUIAQmTkX7rCI9mZ7I6i9kzNUe/+JOeyWpFzlYXHxy9Y5pe/jyhqc JKyZVxz0fkAB4nq6OAPDs0Dwfs/kvGwbIJksT22qJdjmDmNa4V0o8dAjp1IOpLcZWXS1 ZbixV6W2Si1yFJXKTRy+lQjNPHnhaFMikZjiL0YnU3Z+yrFdZ9ERx/9eP6+A0z02EWAR fALk2kCS8RmG423SywooyLSK+NI4x2aL0mCxOLIFAkQPtlZYb0GQpK/2o6dWyUcu/tpg Bj1OF8H6iJ+oOX1AAJENFTiE6QMZx09EDQZDLXmnFFY/HqXs9es0sYuZ4Fcod+4+1G5P U+BA== Received: by 10.205.133.197 with SMTP id hz5mr4602796bkc.126.1336732149150; Fri, 11 May 2012 03:29:09 -0700 (PDT) Received: from [62.24.64.124] (houmles.dkm.cz. [62.24.64.124]) by mx.google.com with ESMTPS id v2sm17556239bkw.16.2012.05.11.03.29.08 (version=SSLv3 cipher=OTHER); Fri, 11 May 2012 03:29:08 -0700 (PDT) Message-ID: <4FACE9F4.2010108@gmail.com> Date: Fri, 11 May 2012 12:29:08 +0200 From: houmles User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20120430 Thunderbird/12.0.1 MIME-Version: 1.0 To: users@directory.apache.org Subject: Re: replication partially working References: <4FAB72D5.6050406@gmail.com> <4FAB75A1.8050409@gmail.com> <4FAB778F.2050209@gmail.com> <4FAB7EAF.2030708@gmail.com> <4FAB970F.5030707@gmail.com> <4FAB98F7.6090104@gmail.com> <4FAB9F58.3080408@gmail.com> <4FACD7FD.3000300@gmail.com> <4FACE3F4.3060203@gmail.com> In-Reply-To: <4FACE3F4.3060203@gmail.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit I already have ads-replattributes: * but even when i explicitly add those 2 attributes it doesnt work. On 05/11/2012 12:03 PM, Emmanuel Lécharny wrote: > Le 5/11/12 11:12 AM, houmles a écrit : >> Guys i found the problem and don't know how to solve it.. >> DN's which have ACLs on them (administrativerole, accesscontrolsubentry) >> don't replicate attributes even when I grant everything for everyone. >> When i remove ACLs, everything works. >> I tested this on both master and slave clear servers, just added new >> partition, DN and ACL on it. >> I suppose this is not intended. Maybe its bug? > > I wonder if we transfert Operational Attributes. Can you add the > followin values : > ads-replattributes: administrativeRole > ads-replattributes: accessControlSubentry > > >