ldap replication
Hi all this is my slapd.conf file. My problem is that I can make it replicate (I 've checked in phpldapadmin all group and user were copied in slave ldap from master by syncrepl)
but after I add more user on master ldap, I didn't see the user I add in slave ldap so I add interval into slapd.conf like I paste here (which I am not sure what it mean, may every hour)<=if anyone know please explain Till now I am really not sure if it can update or not. How can I check this? thanks slapd.conf # This is the main slapd configuration file. See slapd.conf(5) for more # info on the configuration options. ####################################################################### # Global Directives: # Features to permit #allow bind_v2 # Schema and objectClass definitions include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema # Where the pid file is put. The init.d script # will not stop the server if you change this. pidfile /var/run/slapd/slapd.pid # List of arguments that were passed to the server argsfile /var/run/slapd/slapd.args # Read slapd.conf(5) for possible values loglevel 256 # Where the dynamically loaded modules are stored modulepath /usr/lib/ldap moduleload back_hdb moduleload syncprov # The maximum number of entries that is returned for a search operation sizelimit 500 # The tool-threads parameter sets the actual amount of cpu's that is used # for indexing. tool-threads 1 ####################################################################### # Specific Backend Directives for hdb: # Backend specific directives apply to this backend until another # 'backend' directive occurs backend hdb ####################################################################### # Specific Backend Directives for 'other': # Backend specific directives apply to this backend until another # 'backend' directive occurs #backend <other> ####################################################################### # Specific Directives for database #1, of type hdb: # Database specific directives apply to this databasse until another # 'database' directive occurs database hdb # The base of your directory in database #1 suffix "dc=weboff" overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 200 # rootdn directive for specifying a superuser on the database. This is needed # for syncrepl. rootdn "cn=admin,dc=weboff" rootpw dkfeonvc # Where the database file are physically stored for database #1 directory "/var/lib/ldap" # The dbconfig settings are used to generate a DB_CONFIG file the first # time slapd starts. They do NOT override existing an existing DB_CONFIG # file. You should therefore change these settings in DB_CONFIG directly # or remove DB_CONFIG and restart slapd for changes to take effect. # For the Debian package we use 2MB as default but be sure to update this # value if you have plenty of RAM dbconfig set_cachesize 0 2097152 0 # Sven Hartge reported that he had to set this value incredibly high # to get slapd running at all. See http://bugs.debian.org/303057 for more # information. # Number of objects that can be locked at the same time. dbconfig set_lk_max_objects 1500 # Number of locks (both requested and granted) dbconfig set_lk_max_locks 1500 # Number of lockers dbconfig set_lk_max_lockers 1500 # Indexing options for database #1 index objectClass eq index entryCSN,entryUUID eq syncrepl rid=123 provider=ldap://192.168.1.183/ type=refreshAndPersist interval=01:00:00:00 searchbase="dc=weboff" filter="(objectClass=*)" scope=sub attrs="*" schemachecking=off bindmethod=simple binddn="cn=replicator,dc=weboff" credentials=dkfeonvc updateref ldap://192.168.1.183 # Save the time that the entry gets modified, for database #1 lastmod on # Checkpoint the BerkeleyDB database periodically in case of system # failure and to speed slapd shutdown. checkpoint 512 30 # Where to store the replica logs for database #1 # replogfile /var/lib/ldap/replog # The userPassword by default can be changed # by the entry owning it if they are authenticated. # Others should not be able to see it, except the # admin entry below # These access lines apply to database #1 only access to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=weboff" write by anonymous auth by self write by * none #give read access to replicator user access to attrs=userPassword,shadowLastChange by dn="cn=replicator,dc=weboff" read by anonymous auth by * none # Ensure read access to the base for things like # supportedSASLMechanisms. Without this you may # have problems with SASL not knowing what # mechanisms are available and the like. # Note that this is covered by the 'access to *' # ACL below too but if you change that as people # are wont to do you'll still need this if you # want SASL (and possible other things) to work # happily. access to dn.base="" by * read # The admin dn has full write access, everyone else # can read everything. access to * by dn="cn=admin,dc=weboff" write by * read # For Netscape Roaming support, each user gets a roaming # profile for which they have write access to #access to dn=".*,ou=Roaming,o=morsnet" # by dn="cn=admin,dc=weboff" write # by dnattr=owner write ####################################################################### # Specific Directives for database #2, of type 'other' (can be hdb too): # Database specific directives apply to this databasse until another # 'database' directive occurs #database <other> # The base of your directory for database #2 #suffix "dc=debian,dc=org" |
hi there, the solution has been found now, I replace "type=refreshAndPersist" by "type=RefreshOnly" and it works.
So I now have successful ldap replication but I have new issue on secure replication. I would like to have connection between slave ldap and master ldap to be secured. What should I do to get it work? Here is syncrepl part of my slapd.conf file syncrepl rid=123 provider=ldap://192.168.1.183 type=RefreshOnly interval=00:00:00:10 searchbase="dc=weboff" filter="(objectClass=*)" scope=sub attrs="*" schemachecking=off bindmethod=simple binddn="cn=replicator,dc=weboff" credentials=dfsdfjkf updateref ldap://192.168.1.183 when the configuration is like above thing works fine. whenever I edit/add user from master ldap. It do replicate to slave ldap too. but when I try the configuration to have secure connection like below. I couldn't have slave update anymore. syncrepl rid=123 provider=ldaps://192.168.1.183:636 type=RefreshOnly interval=00:00:00:10 searchbase="dc=weboff" filter="(objectClass=*)" scope=sub attrs="*" schemachecking=off bindmethod=simple binddn="cn=replicator,dc=weboff" credentials=dfsdfjkf updateref ldaps://192.168.1.183:636 Thanks |
All times are GMT -5. The time now is 10:57 AM. |