Re: [linux] OpenLDAP syncrepl

[Xavier Renard]

Salut Arnaud,

Le 14/10/07, Jean Dumont <[EMAIL PROTECTED]> a écrit :
>
>
> Le vendredi 05 octobre 2007 à 16:39 +0200, Arnaud Vandyck a écrit :
> > Bonjour à tous,
> >
> > J'essaye de faire un replica ldap mais ça ne va pas!
> >
> > J'ai suivi la doc sur openldap, côté master, j'ai ajouté:
> > replogfile      /var/lib/ldap/replog
> > sessionlog 1 500
> > syncprov-chekpoint 1 10
> > syncprov-sessionlog 1
> >
> > Côté replicat:
> > syncrepl rid=1
> >   provider=ldap://master:389
> >   type=refreshOnly
> >   interval=00:01:00:00
> >   searchbase="dc=ressource-toi,dc=org"
> >   scope=sub
> >   schemachecking=off
> >   updatedn="cn=replica,dc=ressource-toi,org"
> >   bindmethod=simple
> >   binddn="cn=admin,dc=ressource-toi,dc=org"
>
> ici sur le slave il faut un updatedn qui corresponde au binddn et pas
> deux DN différents.


Apparement non,

<sample>

        syncrepl rid=123
                provider=ldap://provider.example.com:389
                type=refreshOnly
                interval=01:00:00:00
                searchbase="dc=example,dc=com"
                filter="(objectClass=organizationalPerson)"
                scope=sub
                attrs="cn,sn,ou,telephoneNumber,title,l"
                schemachecking=off
                updatedn="cn=replica,dc=example,dc=com"
                bindmethod=simple
                binddn="cn=syncuser,dc=example,dc=com"
                credentials=secret

In this example, the consumer will connect to the provider slapd at port 389
of ldap://provider.example.com to perform a polling (*refreshOnly*) mode of
synchronization once a day. It will bind as
cn=syncuser,dc=example,dc=comusing simple authentication with password
"secret". Note that the access
control privilege of cn=syncuser,dc=example,dc=com should be set
appropriately in the provider to retrieve the desired replication content.
The consumer will write to its database with the privilege of the
cn=replica,dc=example,dc=com entry as specified in the updatedn= directive.
The updatedn entry should have write permission to the replica content.
</sample>

Xavier

_______________________________________________________
Linux Mailing List - http://www.unixtech.be
Subscribe/Unsubscribe: http://lists.unixtech.be/cgi-bin/mailman/listinfo/linux
Archives: http://www.mail-archive.com/linux@lists.unixtech.be
IRC: chat.unixtech.be:6667 - #unixtech
NNTP: news.gname.org - gmane.org.user-groups.linux.unixtech