I am using OpenLDAP 2.4.11 with all overlays and all backends compiled.&nbsp; My company is in the middle if rebuilding our LDAP environment and we would like to use OpenLDAP + Syncrepl + RWM to neatly move objects into their new places within the DIT.<br>
<br>Our old DIT looks like:<br><br>ou=people,dc=company,dc=com<br>&nbsp; uid=abc_jsmith<br>&nbsp; uid=abc_jdoe<br>&nbsp; uid=xyz_hsmith<br>&nbsp; uid=xyz_dsmith<br><br>Our new DIT looks like:<br><br>ou=users,o=abc,dc=company,dc=com<br>&nbsp; uid=abc_jsmith<br>
&nbsp; uid=abc_jdoe<br>ou=users,o=xyz,dc=company,dc=com<br>&nbsp; uid=xyz_hsmith<br>&nbsp; uid=xyz_dsmith<br><br>There are about 3100 objects in the ou=people container and we have several hundred clients to the current ldap setup so we will not&nbsp; be able to migrate all in one night.<br>
<br>We are setting the new DIT/servers up in paralell to the old and would like to use syncrepl on the new servers to pull in objects from the old DIT and use syncrepl to find their new place in the tree.&nbsp; At the moment we are testing this setup in a lab enviornment so I am using another backend to represent the old DIT.<br>
<br>Here&#39;s what my config looks like:<br><br>... snip ...<br>database ldif<br>suffix ou=people,dc=company,dc=com<br>directory /var/lib/ldap/people<br>rootdn &quot;cn=Manager,ou=people,dc=company,dc=com&quot;<br>rootpw *******<br>
<br>overlay rwm<br>rwm-rewriteEngine on<br>rwm-rewriteContext default<br>rwm-rewriteRule &quot;(uid=abc_.+),ou=people,dc=company,dc=com$&quot; &quot;$1,ou=users,o=abc,dc=company,dc=com&quot;<br><br>database&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bdb<br>
suffix&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;dc=company,dc=com&quot;<br>rootdn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;cn=Manager,dc=company,dc=com&quot;<br>rootpw&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ********<br><br>syncrepl rid=002<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; provider=ldap://localhost/<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bindmethod=simple<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; binddn=&quot;cn=Manager,dc=company,dc=com&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; credentials=********<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; searchbase=&quot;ou=people,dc=company,dc=com&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; schemachecking=off<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; type=refreshOnly<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; starttls=yes<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; tls_reqcert=allow<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; retry=&quot;60 +&quot;<br>... snip ...<br><br>The ldif backend works as expected, if I do:<br>ldapsearch -x uid=abc_\* -b ou=people,dc=company,dc=com <br><br>I get nicely translated DNs and if I save the output to a file and ldap add it to the new DIT I get users where they belong.<br>
<br>But, I am not getting synchronization.&nbsp; I know I am missing something, probably more RWM rules.&nbsp; Maybe instead of doing the rewrites on the &#39;old&#39; backend I should be doing them on the &#39;new&#39; backend as the data comes into syncrepl?<br>
<br>I am also thinking that the searchbase in the syncrepl clause is part of the problem, I am telling it to sync ou=people and its getting ou=users,o=abc back so it should probably ignore them correct?<br><br>Can anyone steer me in the right direction?<br>
<br>