Skip to content

Instantly share code, notes, and snippets.

@quanah
Created April 19, 2019 23:16
Show Gist options
  • Save quanah/02715de596da945eae384a41bd140928 to your computer and use it in GitHub Desktop.
Save quanah/02715de596da945eae384a41bd140928 to your computer and use it in GitHub Desktop.
Update configuration to enable replication
dn: cn=module{0},cn=config
changetype: modify
add: olcModuleLoad
olcModuleLoad: syncprov
olcModuleLoad: accesslog
dn: cn=config
changetype: modify
replace: olcServerID
olcServerID: 1
dn: olcDatabase={2}mdb,cn=config
changetype: add
objectClass: olcDatabaseConfig
objectClass: olcMdbConfig
olcDatabase: {2}mdb
olcDbDirectory: /var/lib/ldap/accesslog
olcSuffix: cn=accesslog
olcAccess: {0}to dn.subtree="cn=accesslog" by dn.exact="cn=replicator,cn=appaccts,dc=example,dc=com" read by dn.exact="cn=manager,dc=example,dc=com" read
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=config
olcLimits: dn.exact="cn=replicator,cn=appaccts,dc=example,dc=com" time=unlimited size=unlimited
olcSizeLimit: unlimited
olcTimeLimit: unlimited
olcMonitoring: TRUE
olcDbCheckpoint: 0 0
olcDbIndex: entryCSN eq
olcDbIndex: objectClass eq
olcDbIndex: reqEnd eq
olcDbIndex: reqResult eq
olcDbIndex: reqStart eq
olcDbIndex: reqDN eq
olcDbMode: 0600
olcDbSearchStack: 16
olcDbMaxsize: 85899345920
dn: olcOverlay=syncprov,olcDatabase={2}mdb,cn=config
changetype: add
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: syncprov
olcSpNoPresent: TRUE
olcSpReloadHint: TRUE
dn: olcOverlay={0}syncprov,olcDatabase={3}mdb,cn=config
changetype: add
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: {0}syncprov
olcSpCheckpoint: 20 10
olcSpSessionlog: 10000000
dn: olcOverlay={1}accesslog,olcDatabase={3}mdb,cn=config
changetype: add
objectClass: olcOverlayConfig
objectClass: olcAccessLogConfig
olcOverlay: {1}accesslog
olcAccessLogDB: cn=accesslog
olcAccessLogOps: writes
olcAccessLogSuccess: TRUE
olcAccessLogPurge: 01+00:00 00+04:00
dn: olcDatabase={3}mdb,cn=config
changetype: modify
add: olcLimits
olcLimits: dn.exact="cn=replicator,cn=appaccts,dc=example,dc=com" time=unlimited size=unlimited
-
add: olcSyncrepl
olcSyncrepl: rid=102 provider=ldap://ldap2.example.com bindmethod=simple timeout=0 network-timeout=0 binddn=cn=replicator,cn=appaccts,dc=example,dc=com credentials=replicator filter="(objectclass=*)" searchbase="dc=example,dc=com" logfilter="(&(objectClass=auditWriteObject)(reqResult=0))" logbase=cn=accesslog scope=sub schemachecking=off type=refreshAndPersist retry="60 +" syncdata=accesslog keepalive=240:10:30
olcSyncrepl: rid=103 provider=ldap://ldap3.example.com bindmethod=simple timeout=0 network-timeout=0 binddn=cn=replicator,cn=appaccts,dc=example,dc=com credentials=replicator filter="(objectclass=*)" searchbase="dc=example,dc=com" logfilter="(&(objectClass=auditWriteObject)(reqResult=0))" logbase=cn=accesslog scope=sub schemachecking=off type=refreshAndPersist retry="60 +" syncdata=accesslog keepalive=240:10:30
olcSyncrepl: rid=104 provider=ldap://ldap4.example.com bindmethod=simple timeout=0 network-timeout=0 binddn=cn=replicator,cn=appaccts,dc=example,dc=com credentials=replicator filter="(objectclass=*)" searchbase="dc=example,dc=com" logfilter="(&(objectClass=auditWriteObject)(reqResult=0))" logbase=cn=accesslog scope=sub schemachecking=off type=refreshAndPersist retry="60 +" syncdata=accesslog keepalive=240:10:30
-
replace: olcMirrorMode
olcMirrorMode: TRUE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment