My Oracle Support Banner

ODSEE Replicated Topology After Running idsconfig Gives Error "ldap_add: Referral Hop Limit Exceeded" When Trying To Modify (Doc ID 1993921.1)

Last updated on MAY 17, 2018

Applies to:

Oracle Directory Server Enterprise Edition - Version 7.0 to 11.1.1.7.2 [Release 7.0 to 11gR1]
Information in this document applies to any platform.

Symptoms

Configure multimaster replication with two Directory Server instances.
Run idsconfig on both servers.

Try to add a new user, this gives the error message:

# ldapmodify -D "cn=directory manager" -p 389 -j /var/tmp/ldif/p -e err -a -f testuser.ldif
adding new entry uid=testuser,ou=People,dc=example,dc=com
ldap_add: Referral hop limit exceeded
ldap_add: matched: dc=example,dc=com

On checking the dse.ldif file for the 'nsslapd-state' value, instead of 'backend' the value is 'referral on update'. This is incorrect as these are masters and should be read/writable.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
 Configure multimaster replication with two Directory Server instances.
Run idsconfig on both servers.
 Try to add a new user, this gives the error message:

# ldapmodify -D "cn=directory manager" -p 389 -j /var/tmp/ldif/p -e err -a -f testuser.ldif
adding new entry uid=testuser,ou=People,dc=example,dc=com
ldap_add: Referral hop limit exceeded
ldap_add: matched: dc=example,dc=com
 On checking the dse.ldif file for the 'nsslapd-state' value, instead of 'backend' the value is 'referral on update'. This is incorrect as these are masters and should be read/writable.
Cause
 On testing several reinstall options, it was found that the idsconfig was causing this referral change. The Oracle support team for idsconfig (LDAP native client team) confirmed that the idsconfig command is only for stand alone Directory Servers, not replicated directories.
Solution
  Workaround is to run idsconfig before setting up replication. This should keep the nsslapd-state value as 'backend' allowing modifications to be made.
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.