Hi all，

This is Eileen from China SINAP. I am a beginner for openldap soft. I encountered a problem in my study on two LDAP services replication.

I have 2 LDAP services, one name LDPA1, the other is LDAP2 . I want to make them synchronously in mirror mode. But when I set LDAP services rootpw both in hash, the 2 LDAP serivces can’t be synchronous.

My question is

1. if I set my rootpw in hash, my bindmethod must be SASL? If I must use sasl method, can I put the sasl service in the same ldap service? If bindmethod=sasl then what is the saslmech should be?

2. If I change to sasl method, do I need change my database record?

My slapd.conf file set as below, could you pls advice which place I should fix?

moduleload syncprov.la

database bdb

suffix "dc=xxx,dc=xxx"

checkpoint 1024 15

rootdn "cn=xxx,dc=xxx,dc=xxx"

rootpw {SSHA}cXUVsI2kuKNK9kjCagWtvraossyAKuhX

directory /var/lib/ldap/xxx

access to *

by self write

by * read

# Indices to maintain for this database

index objectClass,entryCSN,entryUUID eq,pres

index ou,cn,mail,surname,givenname eq,pres,sub

index uidNumber,gidNumber,loginShell eq,pres

index uid,memberUid eq,pres,sub

index nisMapName,nisMapEntry eq,pres,sub

serverID 1 (ldap2 service is 2)

syncrepl rid=111

provider=ldap://other side ip

bindmethod=sasl

saslmech=ssha

authcid=?

Authzid=?

Realm=?

binddn="cn=xxx,dc=xxx,dc=xxx"

credentials={SSHA}cXUVsI2kuKNK9kjCagWtvraossyAKuhX

searchbase="dc=xxx,dc=xxx"

schemachecking=on

type=refreshAndPersist

retry="60 +"

mirrormode on

overlay syncprov

syncprov-checkpoint 100 10

syncprov-sessionlog 100

My database record just like below:

dn: cn=tiangexuan,ou=users,dc=xxx,dc=xxx

cn: tiangexuan

objectClass: posixAccount

objectClass: shadowAccount

objectClass: inetOrgPerson

sn: tiangexuan

uid: tiangexuan

uidNumber: 10001

gidNumber: 90001

homeDirectory: /home/tiangexuan

loginShell: /bin/bash

userPassword: calvin

Best wishes & regrads

Eileen