Hi all，
This is Eileen from China SINAP. I am a beginner for openldap soft. I encountered a problem in my study on two LDAP services replication.
I have 2 LDAP services, one name LDPA1, the other is LDAP2 . I want to make them synchronously in mirror mode. But when I set LDAP services rootpw both in hash, the 2 LDAP serivces can’t be synchronous.
My question is
1. if I set my rootpw in hash, my bindmethod must be SASL? If I must use sasl method, can I put the sasl service in the same ldap service? If bindmethod=sasl then what is the saslmech should be?
2. If I change to sasl method, do I need change my database record?
My slapd.conf file set as below, could you pls advice which place I should fix?
moduleload syncprov.la
database bdb
suffix "dc=xxx,dc=xxx"
checkpoint 1024 15
rootdn "cn=xxx,dc=xxx,dc=xxx"
rootpw {SSHA}cXUVsI2kuKNK9kjCagWtvraossyAKuhX
directory /var/lib/ldap/xxx
access to *
by self write
by * read
# Indices to maintain for this database
index objectClass,entryCSN,entryUUID eq,pres
index ou,cn,mail,surname,givenname eq,pres,sub
index uidNumber,gidNumber,loginShell eq,pres
index uid,memberUid eq,pres,sub
index nisMapName,nisMapEntry eq,pres,sub
serverID 1 (ldap2 service is 2)
syncrepl rid=111
provider=ldap://other side ip
bindmethod=sasl
saslmech=ssha
authcid=?
Authzid=?
Realm=?
binddn="cn=xxx,dc=xxx,dc=xxx"
credentials={SSHA}cXUVsI2kuKNK9kjCagWtvraossyAKuhX
searchbase="dc=xxx,dc=xxx"
schemachecking=on
type=refreshAndPersist
retry="60 +"
mirrormode on
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
My database record just like below:
dn: cn=tiangexuan,ou=users,dc=xxx,dc=xxx
cn: tiangexuan
objectClass: posixAccount
objectClass: shadowAccount
objectClass: inetOrgPerson
sn: tiangexuan
uid: tiangexuan
uidNumber: 10001
gidNumber: 90001
homeDirectory: /home/tiangexuan
loginShell: /bin/bash
userPassword: calvin
Best wishes & regrads
Eileen