NVM, I was using an old version of LDAP. I recently managed to compile the latest stable version on Windows using Cygwin and everything works as expected.
Il 13/03/2018 19.46, watery ha scritto:
Hello, I'm trying to set up a replica of a remote server (suffix: ou=customer,o=main) in a local subtree (suffix: dc=example,dc=com). The two separate databases work, as I can add entries to both of them using their original suffix with ldapmodify. But no configuration of relay let's me query the replicated content using the local suffix, since ldapsearch either ends with "No Such Object" or doesn't terminate at all, it hangs after:
||connect success # extended LDIF # |ￜ... # LDAPv3 ||||# base <ou=users,dc=example,dc=com> with scope baseObject ||||# filter: (objectclass=*) ||||# requesting: ALL ||||# |Graphically it should look like this:
Remote server:
ou=customer,o=main
|
`-- ou=users,ou=customer,o=main
ￜￜￜ |
ￜￜￜ `-- ou=1000002052,ou=users,ou=customer,o=main
ￜￜￜ |
ￜￜￜ `-- ou=1000001458,ou=users,ou=customer,o=main
ￜￜￜ |
ￜￜￜ `-- ou=1000002113,ou=users,ou=customer,o=main
Local server:
dc=example,dc=com
|
`-- ou=customers,dc=example,dc=com
|ￜￜ |
|ￜￜ `-- cn=name-one,dc=example,dc=com
|ￜￜ |
|ￜￜ `-- cn=name-two,dc=example,dc=com
|
`-- ou=users,dc=example,dc=com
ￜￜￜ |
ￜￜￜ *
ￜￜￜ * (this is the replicated subtree, exposed under the new suffix)
ￜￜￜ *
ￜￜￜ |
ￜￜￜ `-- ou=1000002052,ou=users,dc=example,dc=com
ￜￜￜ |
ￜￜￜ `-- ou=1000001458,ou=users,dc=example,dc=com
ￜￜￜ |
ￜￜￜ `-- ou=1000002113,ou=users,dc=example,dc=com
Here's one of my attempts:
# Remote database bdb directory ... suffix ou=customer,o=main rootdn ... rootpw ... access to * by * manage index ...
overlay memberof
# Relay database relay suffix ou=customers,dc=example,dc=com relay ou=customer,o=main
overlay rwm rwm-suffixmassage ou=customers,dc=example,dc=com ou=customer,o=main
# Local database bdb directory ... suffix dc=example,dc=com rootdn ... rootpw ... access to * by * manage index ...
overlay memberof
overlay refint refint_attributes member refint_nothing "cn=nobody,dc=example,dc=com"