On Wednesday 28 June 2006 15:22, matthew sporleder wrote: > On 6/26/06, Buchan Milne <bgmilne@staff.telkomsa.net> wrote: > > We have a weird legacy DIT which is going to be migrated to a new more > > organised structure by an ongoing project. > > > > In the meantime, we are deploying provisioning tools which we would > > prefer not to modify at the time of the migration. > > > > So, back-relay seems to be the obvious solution (provision to the final > > structure, rewrite with back-relay into the old structure). > > > > So, I have added a new database on one of our dev servers: > > > > > > database relay > > suffix "cn=webmail,cn=mail,ou=isp" > > subordinate > > relay cn=webmail,ou=mail,dc=isp massage > > rootdn <rootdn> > > > > There is a bdb database that holds cn=mail,ou=isp (the legacy basedn). > > > > That works great, searches on cn=webmail,cn=mail,ou=isp returns an entry > > I added under cn=webmail,ou=mail,dc=isp ... except that the first search > > on the cn=mail,ou=isp suffix kills the relay. Any other search which > > should find anything under cn=webmail,cn=mail,ou=isp returns error 32. > > > > > > I've also tried replacing the relay database with a configurations > > using "database meta" and "database ldap" with rwm-suffixmassage, and > > they do the same thing. > > > > It seems I must be missing something here ... > > I have also setup something similar (although I'm attribute mapping), > and I don't see your problems. > > Here's how mine is setup: > database bdb > suffix "dc=dept,dc=com" > rootdn "cn=Manager,dc=dept,dc=com" > rootpw somesecret > directory /usr/local/openldap64-ol2.3.23-bdb4.2.52//var/openldap-data > index objectClass eq > > database relay > suffix "ou=solaris,dc=test,dc=net" > overlay rwm > map attribute homeDirectory testSolarisHomeDirectory > suffixmassage "dc=dept,dc=com" > > database relay > suffix "ou=linux,dc=test,dc=net" > overlay rwm > map attribute homeDirectory testLinuxHomeDirectory > suffixmassage "dc=dept,dc=com" > > I do end up with two homeDirectory attributes coming back if I search > for all attributes, but searches specifically for homeDirectory return > my test*HomeDirectory stuff. I also have some other relay/meta databases which work, but they are not subordinate. It seems like rwm+subordinate (glue overlay of course) is the problem, but the funny thing is that it works once. I'll have to test with manual glue configuration I guess ... Regards, Buchan -- Buchan Milne ISP Systems Specialist B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)
Attachment:
pgp6oxxyZMcAW.pgp
Description: PGP signature