[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: multiple databases (subordinate) and subschemaSubentry
Hi Sebastian
I've got more or less the same setup, but I've got the same rootdn for
all the backend's and the rootpw is only mentioned once (the last
database definition). I then access the databases with different users,
working with ACL's.
See the end of the mail for my example setup.
I have a configuration with two databases like this (one inside the
other)
database bdb
subordinate
suffix "ou=other,o=org,c=ar"
rootdn "cn=Manager,ou=other,c=org,c=ar"
rootpw secret
directory /var/db/openldap-data/other
lastmod on
database bdb
suffix "o=org,c=ar"
rootdn "cn=Manager,o=org,c=ar"
rootpw pepe00
directory /var/db/openldap-data
lastmod on
When I activate the first database (the subordinate one) then I can't
search the subschemaSubentry. (0 entries)
The schemas can only be searched if I bind with the manager password
of the subordinate suffix and not the one from the upper suffix.
#############################
# ou=administration,o=stepping-stone,c=ch
#############################
database hdb
suffix "ou=administration,o=stepping-stone,c=ch"
rootdn "cn=Manager,o=stepping-stone,c=ch"
subordinate
directory /var/lib/openldap-hdb/stepping-stone/administration
index objectClass pres,eq
index entryUUID eq
access to
dn.regex="cn=(.+),ou=people,ou=administration,o=stepping-stone,c=ch$"
attr=userpassword
by dn.regex="cn=$1,ou=people,ou=administration,o=stepping-stone,c=ch"
write
by anonymous auth
by * none
#############################################
# ou=storage,ou=service,o=stepping-stone,c=ch
#############################################
database hdb
suffix "ou=storage,ou=service,o=stepping-stone,c=ch"
rootdn "cn=Manager,o=stepping-stone,c=ch"
subordinate
directory /var/lib/openldap-hdb/stepping-stone/service/storage
index objectClass pres,eq
index cn,uid eq
index entryUUID eq
index uidNumber eq
index gidNumber eq
access to dn.subtree="ou=storage,ou=service,o=stepping-stone,c=ch"
by
group/groupOfUniqueNames/uniqueMember="cn=storage,ou=group,ou=administration,o=stepping-stone,c=ch"
read
###########
# MAIN TREE
###########
database hdb
suffix "o=stepping-stone,c=ch"
rootdn "cn=Manager,o=stepping-stone,c=ch"
rootpw gugus
directory /var/lib/openldap-hdb/stepping-stone
I know, it doesn't really answer your question, but it works.
Kind regards, Michael
--
visit: http://www.stepping-stone.ch
--
e-mail: michael.eichenberger@stepping-stone.ch
mobile: +41 76 392 36 23
icq: 238901781