Differences

This shows you the differences between two versions of the page.

--- docpublic:systemes:ldap:ldapc8reppartiel [2020/02/11 22:11]
procacci@tem-tsp.eu [script de reload]
+++ docpublic:systemes:ldap:ldapc8reppartiel [2020/02/15 07:46] (current)
procacci@tem-tsp.eu [acl]
@@ Line 1: / Line 1: @@
+===== replica ====
+=== ref ===
+  * https://blog.debugo.fr/openldap-replication/
+  * https://ltb-project.org/documentation/nagios-plugins/check_ldap_syncrepl_status
+  * https://www.vincentliefooghe.net/content/openldap-surveiller-et-contr%C3%B4ler-la-r%C3%A9plication
+  * https://pratapsatve.wordpress.com/2017/11/11/replication-of-the-openldap-server/
+  * https://linux.die.net/man/5/slapd.conf => syncrepl parameters
+  * https://stackoverflow.com/questions/45161477/how-to-remove-all-records-from-ldap
 ===== package ltb-project =====
@@ Line 33: / Line 44: @@
 # continue pour que repint puisse lire dans la replication son propre pass et pas seulement faire du auth
 # cf https://www.vincentliefooghe.net/content/les-acl-dans-openldap
+# finalement pas utile car pour etre self il faut d'abord etre authentifié !
 access to attrs=userPassword
         by self                                     auth continue
@@ Line 41: / Line 53: @@
 #Voir le root DSE + base DN , cf http://www.openldap.org/lists/openldap-technical/201203/msg00132.html
 access to dn.subtree="dc=int,dc=fr" attrs=entry,objectclass,contextCSN
-        by dn="cn=rep,ou=dsa,dc=int-evry,dc=fr"     read
+        by dn="cn=rep,ou=dsa,dc=int,dc=fr"     read
         by *                                        read
 ...
@@ Line 117: / Line 129: @@
 # attribut userpassword, utile ici uniquement pour le compte DSA cn=rep
 access to attrs=userPassword
-        by self                                                 auth
         by anonymous                                            auth
         by dn="cn=rep,ou=dsa,dc=int,dc=fr"          read
@@ Line 153: / Line 164: @@
 		bindmethod=simple
 		retry="60 10 300 +"
+                keepalive="240:10:30"
 		binddn="cn=rep,ou=dsa,dc=int,dc=fr"
         	credentials="secretreplica"
 updateref       ldaps://master.int.eu:636
+</code>
+la liste des parametres syncrepl est dans le man slapd.conf
+<code>
+    https://linux.die.net/man/5/slapd.conf
+syncrepl rid=<replica ID> provider=ldap[s]://<hostname>[:port] searchbase=<base DN> [type=refreshOnly|refreshAndPersist]
+[interval=dd:hh:mm:ss] [retry=[<retry interval> <# of retries>]+] [filter=<filter str>] [scope=sub|one|base|subord]
+[attrs=<attr list>] [attrsonly] [sizelimit=<limit>] [timelimit=<limit>] [schemachecking=on|off] [network-timeout=<seconds>]
+[timeout=<seconds>] [bindmethod=simple|sasl] [binddn=<dn>] [saslmech=<mech>] [authcid=<identity>] [authzid=<identity>]
+[credentials=<passwd>] [realm=<realm>] [secprops=<properties>] [keepalive=<idle>:<probes>:<interval>] [starttls=yes|critical]
+[tls_cert=<file>] [tls_key=<file>] [tls_cacert=<file>] [tls_cacertdir=<path>] [tls_reqcert=never|allow|try|demand]
+[tls_ciphersuite=<ciphers>] [tls_crlcheck=none|peer|all] [logbase=<base DN>] [logfilter=<filter str>]
+[syncdata=default|accesslog|changelog]
 </code>

docpublic/systemes/ldap/ldapc8reppartiel.1581459060.txt.gz · Last modified: 2020/02/11 22:11 by procacci@tem-tsp.eu

Show page Old revisions

[unknown link type]Back to top