Re: mirror mode & sasl question

[Dieter KlÃnter <dieter@dkluenter.de>]

Am Wed, 5 Mar 2014 14:38:04 +0800
schrieb "Eileen(=^Ï^=)" <123784635@qq.com>:

> Hi allï
>  
>  
>  
> This is Eileen from China SINAP. I am a beginner for openldap soft. I
> encountered a problem in my study on two LDAP services replication. 
> I have 2 LDAP services, one name LDPA1, the other is LDAP2 . I want
> to make them synchronously in mirror mode. But when I set LDAP
> services rootpw both in hash, the 2 LDAP serivces canât be
> synchronous. My question is 
> 1.      if I set my rootpw in hash, my bindmethod must be SASL? If I
> must use sasl method, can I put the sasl service in the same ldap
> service? If bindmethod=sasl then what is the saslmech should be?
> 2.      If I change to sasl method, do I need change my database
> record? 

In order to use sasl, passwords must be cleartext and you should
configure an apropriate authz-regexp, see man slapd.conf(5)
You may use any sasl mechanism that you sasl framework provides.
[...]

-Dieter


-- 
Dieter KlÃnter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53Â37'09,95"N
10Â08'02,42"E