I'm using puppet for configuration management and with the slapd.conf it was dumb simple to push configs to the master and the slave servers and have the server reload when the config was updated.
However I'm running an overlay that pukes with a slapd.conf and had to convert over to cn=config. Now I'm not sure how I want to manage this. Can I safely modify the files while slapd is running? I wouldn't expect it to pick up the config changes without a reload, but if I want puppet to push configs and reload will this be a valid method?
Or do I need to do something with an LDIF of the config and have some kind of ldapadd/ldapmodify mojo?
Are there any puppet modules for cn=config that I missed when I looked?
--On Friday, February 03, 2012 12:57 PM -0500 Jeff B jeffb.list@gmail.com wrote:
I'm using puppet for configuration management and with the slapd.conf it was dumb simple to push configs to the master and the slave servers and have the server reload when the config was updated.
However I'm running an overlay that pukes with a slapd.conf and had to convert over to cn=config. Now I'm not sure how I want to manage this. Can I safely modify the files while slapd is running? I wouldn't expect it to pick up the config changes without a reload, but if I want puppet to push configs and reload will this be a valid method?
NO. With cn=config, you use ldapmodify or similar to change the database. The cn=config method IS a database, not a set of flat text files. Modifications to the configuration are immediate with the exception of changes to olcSecurity.
Or do I need to do something with an LDIF of the config and have some kind of ldapadd/ldapmodify mojo?
Correct. (or perl's net-ldap, python-ldap, etc).
--Quanah
--
Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
Jeff B wrote:
I'm using puppet for configuration management and with the slapd.conf it was dumb simple to push configs to the master and the slave servers and have the server reload when the config was updated.
However I'm running an overlay that pukes with a slapd.conf and had to convert over to cn=config.
That's a pretty odd overlay; it's currently not possible to write support for cn=config without inherently supporting slapd.conf at the same time.
Now I'm not sure how I want to manage this. Can I safely modify the files while slapd is running? I wouldn't expect it to pick up the config changes without a reload, but if I want puppet to push configs and reload will this be a valid method?
No, and no.
Or do I need to do something with an LDIF of the config and have some kind of ldapadd/ldapmodify mojo?
Yes.
openldap-technical@openldap.org
-
Howard Chu -
Jeff B -
Michael Ströder -
Quanah Gibson-Mount