Gavin,

Thanks for your help. That appears to be working. In a failure situation where rid=1 goes down, and writes began occuring to rid=2, when I bring back up the server which was set to rid=1, what is the proper way to get them back in sync? Would it be just to change the rids and reload openldap?

- Justin Lintz

On Mon, Dec 15, 2008 at 2:57 PM, Gavin Henry ghenry@openldap.org wrote:

----- "Justin Lintz" jlintz@gmail.com wrote:

...

Quanah,

Looking at http://www.openldap.org/doc/admin24/replication.html#N-Way%20Multi-Master it appears the example is with using cn=config to store the configuration. Is there an example somewhere with just using slapd.conf?

I'm in the process of re-writing the replication section, but the following:

olcOverlay: syncprov

dn: olcDatabase={0}config,cn=config
changetype: modify
add: olcSyncRepl
olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple
  credentials=secret searchbase="cn=config" type=refreshAndPersist
  retry="5 5 300 5" timeout=1
olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple
  credentials=secret searchbase="cn=config" type=refreshAndPersist
  retry="5 5 300 5" timeout=1
olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple
  credentials=secret searchbase="cn=config" type=refreshAndPersist
  retry="5 5 300 5" timeout=1
-
add: olcMirrorMode
olcMirrorMode: TRUE

would just go under a database section like other syncrepl statements and look something like:

overlay syncprov

syncrepl rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=secret searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1

syncrepl rid=002 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=secret searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1

syncrepl rid=003 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=secret searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1

mirrormode on

Remember the above is replicating cn=config though.

Check back in the new year.

-- Kind Regards,

Gavin Henry. OpenLDAP Engineering Team.

E ghenry@OpenLDAP.org

Community developed LDAP software.

http://www.openldap.org/project/