Difference between revisions of "2.1.1 slapd.conf Master syncrepl Openldap2.2"

Line 1: Line 1:
'''2.1.1: slapd.conf Master syncrepl Openldap2.2'''
+
[[1.0: Configuring Samba]]
 +
 
 +
[[2.0: Configuring LDAP]]
 +
 
 +
[[3.0: Initialization LDAP Database]]
 +
 
 +
[[4.0: User Management]]
 +
 
 +
[[5.0: Heartbeat HA Configuration]]
 +
 
 +
[[6.0: DRBD]]
 +
 
 +
[[7.0: BIND DNS]]
 +
 
 +
----
 +
 
 +
 
 +
<u>'''Table of Contents'''</u>
 +
 +
[[2.1 slapd.conf Master]]
 +
 
 +
[[2.1.1 slapd.conf Master syncrepl Openldap2.2]]
 +
 
 +
[[2.1.2 slapd.conf Master delta-syncrepl Openldap2.3]]
 +
 
 +
 
  
 
This is the slapd.conf master ldap file; we are using syncrepl instead of slurpd witch is the traditional method.  
 
This is the slapd.conf master ldap file; we are using syncrepl instead of slurpd witch is the traditional method.  

Revision as of 13:40, 25 January 2007

1.0: Configuring Samba

2.0: Configuring LDAP

3.0: Initialization LDAP Database

4.0: User Management

5.0: Heartbeat HA Configuration

6.0: DRBD

7.0: BIND DNS



Table of Contents

2.1 slapd.conf Master

2.1.1 slapd.conf Master syncrepl Openldap2.2

2.1.2 slapd.conf Master delta-syncrepl Openldap2.3


This is the slapd.conf master ldap file; we are using syncrepl instead of slurpd witch is the traditional method.

This configuration file is specifically designed for openldap 2.2 and supports syncrepl refreshOnly mode.

# slapd.conf Master syncrepl Openldap2.2
# Provider

include     /etc/openldap/schema/core.schema
include     /etc/openldap/schema/cosine.schema
include     /etc/openldap/schema/inetorgperson.schema
include     /etc/openldap/schema/nis.schema
include     /etc/openldap/schema/samba.schema

pidfile     /var/run/slapd/slapd.pid
argsfile    /var/run/slapd/slapd.args

database    bdb
suffix      "dc=differentialdesign,dc=org"
rootdn      "cn=Manager,dc=differentialdesign,dc=org"
rootpw      Manager
directory   /var/lib/ldap

access to attrs=userPassword
        by self write
        by dn="cn=sambaadmin,dc=differentialdesign,dc=org" write
        by dn="cn=syncuser,dc=differentialdesign,dc=org" read
        by * auth

access to attrs=sambaLMPassword,sambaNTPassword
        by dn="cn=sambaadmin,dc=differentialdesign,dc=org" write
        by dn="cn=syncuser,dc=differentialdesign,dc=org" read

access to *
        by dn="cn=sambaadmin,dc=differentialdesign,dc=org" write
        by dn="cn=syncuser,dc=differentialdesign,dc=org" read
        by * read

# Indices to maintain

index objectClass           eq
index cn                    pres,sub,eq
index sn                    pres,sub,eq
index uid                   pres,sub,eq
index displayName           pres,sub,eq
index uidNumber             eq
index gidNumber             eq
index memberUID             eq
index sambaSID              eq
index sambaPrimaryGroupSID  eq
index sambaDomainName       eq
index default               sub