11:32 p.m.
Hello,
We've inherited an N-way multi-master setup (based on CentOS OpenLDAP
v. 2.4.39) which was setup with text conf in slapd.conf instead of
online configuration in cn=config.
Due to various dependencies from other internal systems we can't
migrate to online configuration quickly, but we to urgently have to
add an additional schema to our cluster. My Google-fu and wading
through the openldap list archives was unsuccessful.
I suppose that adding a new schema to such a setup would require the
following steps:
1. stop all instances in the cluster
2. add schema to all instances to /etc/openldap/schema
3. start all instances in the cluster
Would this be the correct approach or is there something else I
should be aware of?
Regards,
Martin Božič
9:32 a.m.
--On Wednesday, October 10, 2018 9:32 AM +0200 Martin Božič
<martin.bozic(a)arnes.si> wrote:
Hello,
We've inherited an N-way multi-master setup (based on CentOS OpenLDAP v.
2.4.39) which was setup with text conf in slapd.conf instead of online
configuration in cn=config.
Due to various dependencies from other internal systems we can't migrate
to online configuration quickly, but we to urgently have to add an
additional schema to our cluster. My Google-fu and wading through the
openldap list archives was unsuccessful.
I suppose that adding a new schema to such a setup would require the
following steps:
1. stop all instances in the cluster
2. add schema to all instances to /etc/openldap/schema
3. start all instances in the cluster
Would this be the correct approach or is there something else I
should be aware of?
You have to modify the slapd.conf file to add an include statement for each
schema file you want it to load.
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
9:35 a.m.
You will probably need to edit your slapd.conf file too. i.e. add a line like:
include /usr/local/etc/openldap/schema/kerberos.schema
before restarting slapd
On Oct 9, 2018, at 11:32 PM, Martin Božič
<martin.bozic(a)arnes.si> wrote:
Hello,
We've inherited an N-way multi-master setup (based on CentOS OpenLDAP v. 2.4.39)
which was setup with text conf in slapd.conf instead of online configuration in
cn=config.
Due to various dependencies from other internal systems we can't migrate to online
configuration quickly, but we to urgently have to add an additional schema to our cluster.
My Google-fu and wading through the openldap list archives was unsuccessful.
I suppose that adding a new schema to such a setup would require the
following steps:
1. stop all instances in the cluster
2. add schema to all instances to /etc/openldap/schema
3. start all instances in the cluster
Would this be the correct approach or is there something else I
should be aware of?
Regards,
Martin Božič
2:21 a.m.
On 10/10/18 8:32 AM, Martin Božič wrote:
We've inherited an N-way multi-master setup (based on CentOS
OpenLDAP v.
2.4.39) which was setup with text conf in slapd.conf instead of online
configuration in cn=config.
slapd.conf is still fine and will even be supported in 2.5.
I suppose that adding a new schema to such a setup would require the
following steps:
1. stop all instances in the cluster
2. add schema to all instances to /etc/openldap/schema
3. start all instances in the cluster
If you're just adding *new* schema you can do this one-by-one, as long
as you don't add data requiring the new schema to any of the MMR
providers. So you could avoid the down-time with some extra caution.
After installing the new schema to all MMR providers you can add data
using the new schema.
Just add this line to slapd.conf:
include /path/to/additional.schema
Note:
The new schema file (which one?) might require other schema files to be
loaded before. So probably add the include statement *after* all the
other schema-include statements.
If the new schema also contains a change to *existing* schema for
already *existing* data you might also have to reload the database.
Ciao, Michael.
1881
days inactive
1883
days old
openldap-technical@openldap.org
3 comments
4 participants
participants (4)
-
Martin Božič -
Michael Ströder -
Quanah Gibson-Mount -
Scott Classen