OpenLDAP 2.4.39 running on Debian SID
I also forgot to post my ppolicy conf for both master and slave:
#----- # Master #----- dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: /usr/lib/ldap olcModuleLoad: ppolicy
dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcPPolicyConfig olcOverlay: ppolicy olcPPolicyHashCleartext: FALSE olcPPolicyUseLockout: FALSE olcPPolicyDefault: cn=default,ou=policies,dc=bandes,dc=gob,dc=ve
#----- # Slave #----- dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: /usr/lib/ldap olcModuleLoad: ppolicy
dn: olcOverlay=ppolicy, olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcPPolicyConfig olcOverlay: ppolicy olcPPolicyDefault: cn=default,ou=policies,dc=bandes,dc=gob,dc=ve olcPPolicyHashCleartext: FALSE olcPPolicyUseLockout: FALSE olcPPolicyForwardUpdates: TRUE
On Tue, Sep 16, 2014 at 2:30 PM, Quanah Gibson-Mount quanah@zimbra.com wrote:
--On Tuesday, September 16, 2014 3:27 PM -0430 Raul Hernandez < hernandezr@gmail.com> wrote:
Hello!
I've been experiencing some issues with ppolicy overlay and chaining. I've implemented a simple openldap master and consumer architecture.This implementation works fine. I have data from the master, replicated into the slave, and all writes sent to the slave (add/edit ous and users), are forwarded to the master.
OpenLDAP version?
--Quanah
--
Quanah Gibson-Mount Server Architect Zimbra, Inc.
Zimbra :: the leader in open source messaging and collaboration
--On Tuesday, September 16, 2014 3:37 PM -0430 Raul Hernandez hernandezr@gmail.com wrote:
OpenLDAP 2.4.39 running on Debian SID
I also forgot to post my ppolicy conf for both master and slave:
Hi Raul,
I would suggest looking at test022 in the source code. It specifically tests back-chain & replication with olcPPolicyForwardUpdates: TRUE
Also, please do not top post.
--Quanah
--
Quanah Gibson-Mount Server Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
openldap-technical@openldap.org