Not understood your answer Marc. The root object is what is defined in the "suffix" topic, this is true for every backend in my opinion. Does it mean that "meta" is the only backend type for which the object defined in "suffix" is purely virtual ?
Every object in the meta backend is virtual. Your configuration is hosed, because you state that the database is serving the naming context "ou=A,o=B,c=C", but then you configure URI directives to start serving the naming context from its leaves. If you want the root entry to be defined, you need to configure (at least) one URI to serve it. The "right" approach would be to configure exactly one URI to serve the root entry, and optionally use subtree-exclude or subtree-include to restrict the use of that URI's subtree. Something like
database meta suffix ou=A,o=B,c=C # ... uri ldap://server1/ou=A,o=B,c=C subtree-include "ou=S1,ou=A,o=B,c=C" #... uri ldap://server2/ou=S2,ou=A,o=B,c=C
should do the trick.
p.
Michel
Message du 12/04/11 10:32 De : "Marc Patermann" A : "michel.gruau" Copie à : "openldap-technical openldap org" Objet : Re: Database meta does not have any root node
Michel,
michel.gruau schrieb am 11.04.2011 17:22 Uhr:
I am trying to configure an LDAP proxy towards 2 LDAP targets and I'm using the meta backend as follows:
database meta suffix ou=A,o=B,c=C uri ldap://server1/ou=S1,ou=A,o=B,c=C uri ldap://server2/ou=S2,ou=A,o=B,c=C
It is working fine except for one point : I'm unable to peform a base search on my root node "ou=A,o=B,c=C". It always respond with error
code
32 (no such object).
Reading the man page slapd-meta, I understand this is the normal behaviour. But is there a mean to make this root suffix becoming à concrete node ? This point is mandatory for me as many of my client applications are looking for this entry.
IMHO the root object of your meta database is "ou=S1,ou=A,o=B,c=C" as defined in your config. So if on server1 and server2 ou=S1,ou=A,o=B,c=C exists (and you have read access to it) this will be your meta root object.
I tried to create another backend above this one (using subordinate keyword) in order to host this root note but slapd always complain
about
the fact the suffix is defined twice.
This will not work.
Marc
Une messagerie gratuite, garantie à vie et des services en plus, ça vous tente ? Je crée ma boîte mail www.laposte.net