2011/11/17 Jeffrey Crawford <span dir="ltr">&lt;<a href="mailto:jeffreyc@ucsc.edu">jeffreyc@ucsc.edu</a>&gt;</span><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">

<div class="im">I think you may actually want is slapo-translucent, Basically it&#39;s<br>
</div>aproxy overlay with added local data on top of a bdb or hdb backend<br>
<div class="HOEnZb"><div class="h5">On Wed, Nov 16, 2011 at 8:27 AM, benoit &lt;<a href="mailto:ldap.benben@gmail.com">ldap.benben@gmail.com</a>&gt; wrote:<br>
&gt; Hello Matheus,<br>
&gt; i don&#39;t want to propagate change to the master server and schema: i can&#39;t<br>
&gt; (no write access permission to it).<br>
&gt; I want my slave to continue replicate from the master and to be able to add<br>
&gt; new objects and add new attributes to existing one.<br>
&gt; thank you<br>
&gt; 2011/11/16 xsun &lt;<a href="mailto:matheus.morais@gmail.com">matheus.morais@gmail.com</a>&gt;<br>
&gt;&gt;<br>
&gt;&gt; Sorry but I did not understand what is your problem.<br>
&gt;&gt; If you want to write on your &#39;slave&#39; and want that change propagated to<br>
&gt;&gt; all your servers, then you should search at slapd.conf manual for the<br>
&gt;&gt; updateref option.<br>
&gt;&gt;<br>
&gt;&gt; On Wed, Nov 16, 2011 at 12:08 PM, benoit &lt;<a href="mailto:ldap.benben@gmail.com">ldap.benben@gmail.com</a>&gt; wrote:<br>
&gt;&gt;&gt;<br>
&gt;&gt;&gt; Hello,<br>
&gt;&gt;&gt; I have setup a ldap replicate, replicating data from an offsite ldap<br>
&gt;&gt;&gt; master. Replication is ok, but being a consumer replicate, my ldap server is<br>
&gt;&gt;&gt; read only.<br>
&gt;&gt;&gt; I need to add and modify attributes to this replicate, but i have no<br>
&gt;&gt;&gt; write access to the master and ldap master admin won&#39;t change/update<br>
&gt;&gt;&gt; schemas...<br>
&gt;&gt;&gt; From the guide, i can&#39;t figure if it&#39;s possible.<br>
&gt;&gt;&gt; Please, let me know what solution i have (on any Linux distro).<br>
&gt;&gt;&gt; thanks<br>
&gt;&gt;&gt; Ben,<br>
&gt;<br>
&gt;<br>
<br>
</div></div></blockquote></div><div>Hello,</div><div><br></div><div>thank you for your answer and sorry for my late answer.</div><div>Actually, i managed to install <a href="http://proxy.exemple.fr">proxy.exemple.fr</a>, a translucent proxy to remote directory.</div>

<div>When i query the proxy, it returns me entry from the remote directory as expected:</div><div>$&gt;ldapsearch -LLL -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a> -x -b &quot;ou=people,dc=exemple, dc=fr&quot; &#39;(uid=bob)&#39; </div>

<div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div><div>...</div><div>uid: bob</div><div>telephoneNumber: +01234567891</div><div><br></div><div>But  i don&#39;t understand how to add modify entry on the local proxy database. I tried to do from what i understood from the man pages and howto,but </div>

<div>it&#39;s not working as expected.</div><div>I get an error when i laucn the following command on the empty proxy(slapcat returns nothing)</div><div>$&gt;ldapmodify -x -W -D &quot;cn=manager,dc=exemple,dc=fr&quot; -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a>  </div>

<div>Enter LDAP Password: </div><div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div><div>changetype:modify</div><div>replace:telephoneNumber</div><div>telephoneNumber:+000000000000   </div><div><br></div><div>modifying entry &quot;uid=bob,ou=people,dc=exemple,dc=fr&quot;</div>

<div>ldap_modify: No such object (32)</div><div>        additional info: attempt to modify nonexistent local record</div><div>$&gt;ldapmodify -x -W -D &quot;cn=manager,dc=exemple,dc=fr&quot; -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a>  </div>

<div>Enter LDAP Password: </div><div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div><div>changetype:modify</div><div>add:telephoneNumber1</div><div>telephoneNumber1:+00000000000</div><div><br></div><div>modifying entry &quot;uid=bob,ou=people,dc=exemple,dc=fr&quot;</div>

<div>ldap_modify: No such object (32)</div><div>        additional info: attempt to modify nonexistent local record</div><div><br></div><div>I need to add an entry to the local database with new or modified attribute.</div>

<div>$&gt;ldapmodify -x -W -D &quot;cn=manager,dc=exemple,dc=fr&quot; -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a>  </div><div>Enter LDAP Password: </div><div>Enter LDAP Password: </div><div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div>

<div>changetype:add</div><div>telephoneNumber:+000000000000</div><div>telephoneNumber1:+00000000000</div><div><br></div><div>A query to the proxy returns me the new and modified attributes correctly:</div><div>$&gt;ldapsearch -LLL -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a> -x -b &quot;ou=people,dc=exemple, dc=fr&quot; &#39;(uid=bob)&#39; </div>

<div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div><div>...</div><div>uid: bob</div><div>telephoneNumber: +000000000000</div><div>telephoneNumber1: +00000000000</div><div><br></div><div>But even with an entry in the local database, i can&#39;t replace or add attribute:</div>

<div>$&gt;ldapmodify -x -W -D &quot;cn=manager,dc=exemple,dc=fr&quot; -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a>  </div><div>Enter LDAP Password: </div><div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div>

<div>changetype:modify</div><div>replace:telephoneNumber</div><div>telephoneNumber:+666666666</div><div><br></div><div>modifying entry &quot;uid=bob,ou=people,dc=exemple,dc=fr&quot;</div><div>ldap_modify: No such object (32)</div>

<div>        additional info: attempt to modify nonexistent local record</div><div><br></div><div>$&gt;ldapmodify -x -W -D &quot;cn=manager,dc=exemple,dc=fr&quot; -H ldap://<a href="http://proxy.exemple.fr">proxy.exemple.fr</a>  </div>

<div>Enter LDAP Password: </div><div>dn: uid=bob,ou=people,dc=exemple,dc=fr</div><div>changetype:modify</div><div>add:telephoneNumber2</div><div>telephoneNumber2:+2222222222222</div><div><br></div><div>modifying entry &quot;uid=bob,ou=people,dc=exemple,dc=fr&quot;</div>

<div>ldap_modify: No such object (32)</div><div>        additional info: attempt to modify nonexistent local record</div><div><br></div><div>Please, help me understand the way translucent works.</div><div><br></div><div>
remote dir:</div>
<div>debian_version 5.0.6</div><div>slapd 2.4.11 (Jul 23 2010 21:37:26) $</div><div><br></div><div>###########################################&quot;&quot;&quot;</div><div>translucent proxy:</div><div>debian_version 6.0.3</div>

<div>OpenLDAP: slapd 2.4.23 (Jun 15 2011 13:31:57) $</div><div><br></div><div><br></div><div>#translucent conf partial extract:</div><div>backend         bdb</div><div>database        bdb</div><div>suffix          &quot;dc=exemple,dc=fr&quot;</div>

<div>rootdn          &quot;cn=manager,dc=exemple,dc=fr&quot;</div><div>rootpw          {SHA}YQn44Y9lEocMG=</div><div>directory       /var/lib/ldap</div><div>lastmod     off</div><div>overlay     translucent</div><div>uri         &quot;ldap://<a href="http://remote.exemple.fr">remote.exemple.fr</a>&quot; </div>

<div>acl-bind    binddn=&quot;cn=manager,dc=exemple,dc=fr&quot; credentials=&quot;{SHA}YQn44Y9lEocMG=&quot;</div><div><br></div>