Description of problem:

I am not sure if I am using repl-monitor.pl in a wrong way. But from my
understanding, either we use it simplest as possible like this:

repl-monitor.pl -s -c ipanew:389 -w secret12

and the current instance in 389 port has a replication agreement like this:

dn: cn=torhel6,cn=replica,cn=dc\3Dmyexample\2Cdc\3Dcom,cn=mapping
tree,cn=config
objectClass: top
objectClass: nsDS5ReplicationAgreement
cn: torhel6
nsDS5ReplicaHost: ipaclient.example.com
nsDS5ReplicaRoot: dc=myexample,dc=com
nsDS5ReplicaPort: 636
nsDS5ReplicaTransportInfo: SSL
nsDS5ReplicaBindDN: cn=replication manager,cn=config
nsDS5ReplicaBindMethod: SIMPLE
nsDS5ReplicaCredentials: secret12

it seems the server "ipaclient.example.com:636" is added to the list of servers
and in

sub get_replicas
{
....
....
        $conn = new Mozilla::LDAP::Conn ($host, $shadowport, "$binddn",
$bindpwd, $bindcert);

....
....


the connection is done with the right host and port but the bind cert is empty.

So, the connection hangs.

It seems to be the same if I use "-f file" with the connections to the server
usingport 389 because it's still browsing the agreemnts (from what I have seen)
and trying to use the host and port defined in the agreement.

Perhaps I am not using the script as expected ?

Please, feel free to close this bug if it's the case.



Version-Release number of selected component (if applicable):

389-ds-base-1.3.4.0-30.el7_2.x86_64



How reproducible:

it's shown in description.