Re: multiple DIT

[Patrick Laimbock <patrick@laimbock.com>]

Hi Andres,

On 23-07-14 17:37, andres palomo wrote:
> Hi Dan
>
> as per your instructions
> I added the olcSuffix
>
> # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
> # CRC32 c5bb4c92
> dn: olcDatabase={1}hdb
> objectClass: olcDatabaseConfig
> objectClass: olcHdbConfig
> olcDatabase: {1}hdb
> olcDbDirectory: /var/lib/ldap
> olcSuffix: dc=com
> olcSuffix: dc=net
> olcSuffix: dc=net

I think they meant you can use olcSuffix: "" and then add dc=com, 
dc=net, dc=org subtrees. So I guess something like this:

dn: olcDatabase={1}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/lib/ldap
olcSuffix: ""  <<-----
<plus the rest>

OR

Use separate backends for each dc=com, dc=net, dc=org suffixes. I think 
that means you need to add a separate definition for each suffix. So 
something like this:

dn: olcDatabase={1}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/lib/ldap/COM  <<----- separate dir for dc=com
olcSuffix: dc=com  <<-----
<plus the rest>

dn: olcDatabase={2}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {2}hdb
olcDbDirectory: /var/lib/ldap/NET  <<----- separate dir for dc=net
olcSuffix: dc=net  <<-----
<plus the rest>

dn: olcDatabase={3}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {3}hdb
olcDbDirectory: /var/lib/ldap/ORG  <<----- separate dir for dc=org
olcSuffix: dc=org  <<-----
<plus the rest>

If I got it wrong I hope someone in the know will pitch in.

Finally, if you are going to do anything serious with OpenLDAP it has 
been recommended repeatedly on this list that one should use the latest 
version which currently is 2.4.39. And maybe think about using MDB 
instead of HDB/BDB if you need better performance.

HTH,
Patrick