Hi there,
I have some trouble using rwm overlay. In fact, i am not sure it fits my need, but the documentation isn't explicit about that point.
I am trying to make some replication from a master OpenLDAP server to some other server in my DMZ, through a proxy. The proxy retrieve what i need from the master, then push it to DMZ server. There is some attribute on my master server that I don't want on the DMZ server, for instance sambaGroupMapping & sambaSamAccount. The idea was using rwm to delete those objectClass, and attribute. But it doesn't work, i can change objectClass name, but i can't delete them, and i can delete attribute, not rename them (doesn't matter in my case).
Here is my configuration, i tried something with the relay backend, but it doesn't matter, focus on rwm configuration.
######################################################## include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/samba.schema include /etc/ldap/schema/authldap.schema
pidfile /var/run/slapd/slapd.pid argsfile /var/run/slapd/slapd.args
loglevel -1
modulepath /usr/lib/ldap moduleload back_ldap moduleload back_relay moduleload syncprov moduleload rwm
database ldap suffix "ou=proxy,o=ca,c=net" uri ldap://ldap-dmz
acl-bind bindmethod=simple
idassert-bind bindmethod=simple binddn="cn=admin,ou=real,o=ca,c=net" credentials="secret"
database relay suffix "ou=real,o=ca,c=net" relay "ou=proxy,o=ca,c=net"
rootdn "cn=admin,ou=real,o=ca,c=net"
lastmod on
restrict all
overlay rwm rwm-rewriteEngine on
#Don't work rwm-map objectclass sambaGroupMapping #Work rwm-map objectclass sambaSamAccount sa #Don't work rwm-map objectclass *
syncrepl rid=001 provider=ldap://ldap
attrs="@inetOrgPerson,@posixAccount,@shadowAccount,@organizationalPerson,@person" bindmethod=simple searchbase="ou=people,ou=real,o=ca,c=net" type=refreshAndPersist retry="60 +" interval=00:00:01:00 schemachecking=off
overlay syncprov
########################################################
Documentation about rwm overlay does not indicate that objectClass can't be renamed.
I also tried to filter those attribute thanks to exattrs / attrs of my syncrepl overlay, but don't work either, it doesn't delete the objectClass (seen with wireshark).
Maybe it's not the right way to delete those things. If you have any idea about how to do it.
Thanks you for help.
Regards, Cédric.