Centos8のLDAPサーバーでレプリケーションが出来ない

Question

LDAPは389-dsを使ってます。
書籍を元に進めているのですが
Error: Could not find the agreement "agreement-nscg-to-second" for suffix "dc=nscg,dc=jp"
と言われてしまいます…
構築手順は↓↓↓↓

コンシューマ側の設定

Enter system's hostname [consumer.nscg.jp]:

Enter the instance name [consumer]:

Enter port number [389]:

Create self-signed certificate database [yes]:

Enter secure port number [636]:

Enter Directory Manager DN [cn=Directory Manager]:

Enter the Directory Manager password:
Confirm the Directory Manager Password:

Enter the database suffix (or enter "none" to skip) [dc=consumer,dc=nscg,dc=jp]: dc=nscg,dc=jp

Create sample entries in the suffix [no]:

Create just the top suffix entry [no]: yes

Do you want to start the instance after the installation? [yes]:

Are you ready to install? [no]: yes

サプライア側
Enter system's hostname [supplier.nscg.jp]:

Enter the instance name [supplier]:

Enter port number [389]:

Create self-signed certificate database [yes]:

Enter secure port number [636]:

Enter Directory Manager DN [cn=Directory Manager]:

Enter the Directory Manager password:
Confirm the Directory Manager Password:

Enter the database suffix (or enter "none" to skip) [dc=supplier,dc=nscg,dc=jp]: dc=nscg,dc=jp

Create sample entries in the suffix [no]:

Create just the top suffix entry [no]: yes

Do you want to start the instance after the installation? [yes]:

Are you ready to install? [no]: yes

インストールは無事済みました。

コンシューマ側
[root@consumer ~]# dsconf consumer replication enable --suffix="dc=nscg,dc=jp" --role="consumer" --bind-dn="cn=replication manager,cn=config" --bind-passwd =replica
Replication successfully enabled for "dc=nscg,dc=jp"

サプライア側
[root@supplier ~]# dsconf supplier replication enable --suffix="dc=nscg,dc=jp" -
-role="master" --replica-id=1
Replication successfully enabled for "dc=nscg,dc=jp"

[root@supplier ~]# dsconf supplier repl-agmt create --suffix="dc=nscg,dc=jp" --host=consumer.nscg.jp --port=389 --conn-protocol=LDAP --bind-dn="cn=replication manager,cn=config" --bind-passwd=replica --bind-method=SIMPLE --init agreement-consumer
Successfully created replication agreement "agreement-consumer"
Agreement initialization started...

ここまでは書籍の通りうまく行ったように思うのですが

[root@supplier ~]# dsconf supplier repl-agmt init-status --suffix="dc=nscg,dc=jp" agreement-nscg-to-third
Error: Could not find the agreement "agreement-nscg-to-third" for suffix "dc=nscg,dc=jp"

ここでエラーが出ました。本来であれば
Agreement successfully initiallzed
と出るのが正常の様ですが…
どこを直した良いでしょうか？ログはこちらになります

[27/Sep/2021:23:19:16.414947243 +0900] - INFO - Security Initialization - slapd_ssl_init2 - NSS adjusted SSL version range: min: TLS1.2, max: TLS1.3
[27/Sep/2021:23:19:16.415290676 +0900] - INFO - main - 389-Directory/1.4.4.16 B2021.175.1723 starting up
[27/Sep/2021:23:19:16.415411544 +0900] - INFO - main - Setting the maximum file descriptor limit to: 262144
[27/Sep/2021:23:19:16.954293203 +0900] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds
[27/Sep/2021:23:19:16.955750795 +0900] - INFO - ldbm_instance_config_cachememsize_set - force a minimal value 512000
[27/Sep/2021:23:19:16.957811530 +0900] - NOTICE - bdb_start_autotune - found 7954764k physical memory
[27/Sep/2021:23:19:16.957946946 +0900] - NOTICE - bdb_start_autotune - found 7091384k available
[27/Sep/2021:23:19:16.958065184 +0900] - NOTICE - bdb_start_autotune - cache autosizing: db cache: 497172k
[27/Sep/2021:23:19:16.958181850 +0900] - NOTICE - bdb_start_autotune - cache autosizing: userroot entry cache (1 total): 1376256k
[27/Sep/2021:23:19:16.959159589 +0900] - NOTICE - bdb_start_autotune - cache autosizing: userroot dn cache (1 total): 196608k
[27/Sep/2021:23:19:16.960118019 +0900] - NOTICE - bdb_start_autotune - total cache size: 1833347276 B;
[27/Sep/2021:23:19:16.961017253 +0900] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher AES in backend userroot, attempting to create one...
[27/Sep/2021:23:19:16.962646656 +0900] - INFO - attrcrypt_cipher_init - Key for cipher AES successfully generated and stored
[27/Sep/2021:23:19:16.962842303 +0900] - ERR - attrcrypt_cipher_init - No symmetric key found for cipher 3DES in backend userroot, attempting to create one...
[27/Sep/2021:23:19:16.964359394 +0900] - INFO - attrcrypt_cipher_init - Key for cipher 3DES successfully generated and stored
[27/Sep/2021:23:19:17.005349668 +0900] - INFO - slapd_daemon - slapd started.  Listening on All Interfaces port 389 for LDAP requests
[27/Sep/2021:23:19:17.005572619 +0900] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests
[27/Sep/2021:23:19:17.005721855 +0900] - INFO - slapd_daemon - Listening on /var/run/slapd-supplier.socket for LDAPI requests
[27/Sep/2021:23:21:20.726068602 +0900] - NOTICE - NSMMReplicationPlugin - changelog program - _cl5ConstructRUV - Rebuilding the replication changelog RUV, this may take several minutes...
[27/Sep/2021:23:21:20.726691914 +0900] - NOTICE - NSMMReplicationPlugin - changelog program - _cl5ConstructRUV - Rebuilding replication changelog RUV complete.  Result 0 (Success)
[27/Sep/2021:23:21:20.726819261 +0900] - NOTICE - NSMMReplicationPlugin - changelog program - _cl5ConstructRUV - Rebuilding the replication changelog RUV, this may take several minutes...
[27/Sep/2021:23:21:20.726939530 +0900] - NOTICE - NSMMReplicationPlugin - changelog program - _cl5ConstructRUV - Rebuilding replication changelog RUV complete.  Result 0 (Success)
[27/Sep/2021:23:26:29.201596702 +0900] - ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)
[27/Sep/2021:23:26:29.202263588 +0900] - ERR - NSMMReplicationPlugin - bind_and_check_pwp - agmt="cn=agreement-consumer" (consumer:389) - Replication bind with SIMPLE auth failed: LDAP error 49 (Invalid credentials) ()
[27/Sep/2021:23:26:29.212581888 +0900] - WARN - NSMMReplicationPlugin - repl5_tot_run - Unable to acquire replica for total update, error: 49, retrying in 1 seconds.
[27/Sep/2021:23:26:30.214847273 +0900] - ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)
[27/Sep/2021:23:26:30.215347506 +0900] - WARN - NSMMReplicationPlugin - repl5_tot_run - Unable to acquire replica for total update, error: 49, retrying in 2 seconds.
[27/Sep/2021:23:26:32.218214423 +0900] - ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)
[27/Sep/2021:23:26:32.218728287 +0900] - WARN - NSMMReplicationPlugin - repl5_tot_run - Unable to acquire replica for total update, error: 49, retrying in 3 seconds.
[27/Sep/2021:23:26:35.222715645 +0900] - ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)
[27/Sep/2021:23:26:35.223228992 +0900] - WARN - NSMMReplicationPlugin - repl5_tot_run - Unable to acquire replica for total update, error: 49, retrying in 4 seconds.
[27/Sep/2021:23:26:39.225258584 +0900] - ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)
[27/Sep/2021:23:26:39.225747233 +0900] - WARN - NSMMReplicationPlugin - repl5_tot_run - Unable to acquire replica for total update, error: 49, retrying in 5 seconds.
[27/Sep/2021:23:26:44.231685920 +0900] - ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)

Comments

[TaichiYanagiya]

"dsconf supplier repl-agmt create ..." (レプリカ合意) は実施済みですか？

[maki19]

記載した通り
dsconf supplier repl-agmt create --suffix="dc=nscg,dc=jp" --host=consumer.nscg.jp --port=389 --conn-protocol=LDAP --bind-dn="cn=replication manager,cn=config" --bind-passwd=replica --bind-method=SIMPLE --init agreement-consumer
と実施して
Successfully created replication agreement "agreement-consumer"
Agreement initialization started...
とリアクションを得ています

[TaichiYanagiya]

失礼しました。
create の時の合意名 "agreement-consumer" と init-status のときの "agreement-nscg-to-third" が違っていますが、記載ミスですか？

[maki19]

書籍の通りの実行ですが、間違っているんですね…そこをagreement-consumerとしましたところ
Agreement initialization failed: Error (49) - LDAP error: Invalid credentials - no response received
となりログも
ERR - slapi_ldap_bind - Error: could not bind id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error 49 (Invalid credentials)
に変化しました。
dnかpasswordが違うらしいのですが、何が何やら…結構調べたんですが389-dsの情報が何分少なくて…
引数が足りない感じでしょうか？

Answer 1

dsconf supplier repl-agmt create --suffix="dc=nscg,dc=jp" --host=consumer.nscg.jp --port=389 --conn-protocol=LDAP --bind-dn="cn=replication manager,cn=config" --bind-passwd=replica --bind-method=SIMPLE --init agreement-consumer
Successfully created replication agreement "agreement-consumer"
のagreement-consumerを
agreement-nscg-to-thirdにして確認したら出来ました。意味わからん。