[LMStone]

Originally Posted by quanah

Now that I'm off vacation, I got a chance to look at this. The problem was that 3 CA certs were provided along with the server cert. Two of the three certs went together, one did not. The one that did not hashed to the same value as one that did, and overwrote the symlink. Removing the invalid CA cert from the chain and symlinking the hash of the correct one allowed replication to work.

--Quanah

Hi Quanah,

Hope you had a nice vacation, and thank you for jumping on this so quickly upon your return!

I appreciate you testing that LDAP replication will now work; zmlocalconfig on the servers which are LDAP replicas reports that those servers are still using the LDAP master exclusively for LDAP queries. We'll change that tonight during the maintenance window and then we can scratch this one off the list.

Thank you again, and with best regards,
Mark