[Date Prev][Date Next] [Chronological] [Thread] [Top]
RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Subject: RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
From: PROST FrÃdÃric <f.prost@mb-line.com>
Date: Thu, 8 Mar 2012 10:29:26 +0100
Accept-language: fr-FR
Acceptlanguage: fr-FR
Content-language: fr-FR
In-reply-to: <839A1E808F07E0C85EC17A2F@[192.168.1.30]>
References: <F1B8974F05A3C0489FE56C3A93E74AD3056E088C88@srv-exch01> <F25CC7A8F6723B859F8447FF@[192.168.1.46]> <F1B8974F05A3C0489FE56C3A93E74AD30572EB1942@srv-exch01> <79A63B3C28C99F5FC4E72B19@[192.168.1.30]> <F1B8974F05A3C0489FE56C3A93E74AD30572EB1AC6@srv-exch01> <839A1E808F07E0C85EC17A2F@[192.168.1.30]>
Thread-index: Acz8g/mpQCDGYjYFQXqmyT7b/L6vjQAhnL5A
Thread-topic: OpenLDAP 2.4 : replication doesn't work when customer is stopped
Hello,

I followed your advice and installed OpenLDAP 2.4.30 from source and I do have the same problem : replication is working fine if both nodes are online but if one is off, then when it comes back, changes done on the first node while second node is off are not replicated .

Here is the sync log I got from ldap1 and ldap2 :

If you need more information, please let me know.

Regards,

Frederic


1. Change on uid=f.prost@mb-line.com on LDAP 1 WHILE LDAP2 IS ON => change is replicated
----------------------------------------------------------------------------------------

LDAP1 :
-------
Mar  8 10:18:27 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=002 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
Mar  8 10:18:27 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=004 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: slap_queue_csn: queing 0x7fc733ba8220 20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: slap_graduate_commit_csn: removing 0x7fc72c001b90 20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: syncprov_sendresp: cookie=rid=003,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: syncprov_sendresp: cookie=rid=003,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=003 cookie=rid=003,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=003 CSN too old, ignoring 20120308091919.539118Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=004 cookie=rid=004,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=004 CSN too old, ignoring 20120308091919.539118Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)


LDAP 2 :
--------
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: do_syncrep2: rid=003 cookie=rid=003,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncrepl_message_to_entry: rid=003 DN: uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local, UUID: ad82ba5a-f8c3-1030-97f8-cfd57a135aef
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncrepl_entry: rid=003 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_MODIFY)
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: <= bdb_equality_candidates: (entryUUID) not indexed
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncrepl_entry: rid=003 be_search (0)
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncrepl_entry: rid=003 uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: slap_queue_csn: queing 0x7f23fc10ea00 20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: slap_graduate_commit_csn: removing 0x7f23fc112540 20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncprov_sendresp: cookie=rid=004,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncrepl_entry: rid=003 be_modify uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local (0)
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: slap_queue_csn: queing 0x7f23fc10ea00 20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: syncprov_sendresp: cookie=rid=004,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: do_syncrep2: rid=004 cookie=rid=004,csn=20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: slap_graduate_commit_csn: removing 0x7f23fc10f930 20120308091919.539118Z#000000#000#000000
Mar  8 10:19:19 srv-xxx-devlinux01 slapd[22544]: do_syncrep2: rid=004 CSN too old, ignoring 20120308091919.539118Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)


2. Change on LDAP 1 WHILE LDAP2 IS OFF
-----------------------------------

LDAP1 :
-------
Mar  8 10:21:54 srv-xxx-devlinux01 slapd[32686]: slap_client_connect: URI=ldap://192.168.1.111 DN="uid=syncrepl,dc=mbweb,dc=local" ldap_sasl_bind_s failed (-1)
Mar  8 10:21:54 srv-xxx-devlinux01 slapd[32686]: do_syncrepl: rid=002 rc -1 retrying
Mar  8 10:21:54 srv-xxx-devlinux01 slapd[32686]: slap_client_connect: URI=ldap://192.168.1.111 DN="uid=syncrepl,dc=mbweb,dc=local" ldap_sasl_bind_s failed (-1)
Mar  8 10:21:54 srv-xxx-devlinux01 slapd[32686]: do_syncrepl: rid=004 rc -1 retrying
Mar  8 10:21:59 srv-xxx-devlinux01 slapd[32686]: slap_queue_csn: queing 0x7fc733ba8220 20120308092159.768904Z#000000#000#000000
Mar  8 10:21:59 srv-xxx-devlinux01 slapd[32686]: syncprov_sendresp: cookie=rid=003,csn=20120308092159.768904Z#000000#000#000000
Mar  8 10:21:59 srv-xxx-devlinux01 slapd[32686]: slap_graduate_commit_csn: removing 0x7fc72c001b90 20120308092159.768904Z#000000#000#000000
Mar  8 10:21:59 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=003 cookie=rid=003,csn=20120308092159.768904Z#000000#000#000000
Mar  8 10:21:59 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=003 CSN too old, ignoring 20120308092159.768904Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)


3. LDAP2 Restarting => Change on LDAP1 is not replicated
--------------------------------------------------------
LDAP1 :
-------
Mar  8 10:22:24 srv-xxx-devlinux01 slapd[32686]: slap_client_connect: URI=ldap://192.168.1.111 DN="uid=syncrepl,dc=mbweb,dc=local" ldap_sasl_bind_s failed (-1)
Mar  8 10:22:24 srv-xxx-devlinux01 slapd[32686]: do_syncrepl: rid=002 rc -1 retrying
Mar  8 10:22:24 srv-xxx-devlinux01 slapd[32686]: slap_client_connect: URI=ldap://192.168.1.111 DN="uid=syncrepl,dc=mbweb,dc=local" ldap_sasl_bind_s failed (-1)
Mar  8 10:22:24 srv-xxx-devlinux01 slapd[32686]: do_syncrepl: rid=004 rc -1 retrying
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[32686]: <= bdb_equality_candidates: (entryCSN) not indexed
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[32686]: <= bdb_inequality_candidates: (entryCSN) not indexed
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[32686]: <= bdb_inequality_candidates: (entryCSN) not indexed
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[32686]: Entry uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local changed by peer, ignored
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[32686]: syncprov_search_response: cookie=rid=003,csn=20120308092159.768904Z#000000#000#000000
Mar  8 10:22:55 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=002 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
Mar  8 10:22:55 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=004 LDAP_RES_INTERMEDIATE - REFRESH_DELETE


LDAP2 :
-------
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22588]: [INFO] Using built-in configuration - this may cause some problems
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22591]: [INFO] Launching OpenLDAP configuration test...
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22597]: [OK] OpenLDAP configuration test successful
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22598]: [INFO] no db_recover done
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22599]: [INFO] Launching OpenLDAP...
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22600]: [OK] file descriptor limit set to 2048
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22601]: @(#) $OpenLDAP: slapd 2.4.30 (Mar  8 2012 09:39:26) $#012#011root@srv-xxx-devlinux01:/root/openldap/servers/slapd
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: hdb_monitor_db_open: monitoring disabled; configure monitor database to enable
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: slapd starting
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=003 LDAP_RES_INTERMEDIATE - SYNC_ID_SET
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=003 LDAP_RES_INTERMEDIATE - REFRESH_PRESENT
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=003 cookie=rid=003,csn=20120308092159.768904Z#000000#000#000000
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: <= bdb_inequality_candidates: (entryCSN) not indexed
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID b4c3f514-f8b8-1030-8ceb-8589f83e020f, dn dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID b4c9ce9e-f8b8-1030-8cec-8589f83e020f, dn cn=admin,dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID ba938f2a-f8ba-1030-8095-15116aa2ad47, dn ou=People,dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID ba94225a-f8ba-1030-8096-15116aa2ad47, dn ou=Group,dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID a1e3cfcc-f8be-1030-9b4d-a770f20bbc10, dn uid=syncrepl,dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=001 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID ad82ba5a-f8c3-1030-97f8-cfd57a135aef, dn uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: nonpresent_callback: rid=003 present UUID e241b61a-f8c3-1030-97f9-cfd57a135aef, dn uid=s.lefevre@mb-line.com,ou=People,dc=mbweb,dc=local
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: slap_queue_csn: queing 0xf892b0 20120308092159.768904Z#000000#000#000000
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=002 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: slap_graduate_commit_csn: removing 0x7feab8103d60 20120308092159.768904Z#000000#000#000000
Mar  8 10:22:34 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=004 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
Mar  8 10:22:35 srv-xxx-devlinux01 slapd[22614]: [OK] OpenLDAP started on port 389 and 636


4. CHANGE ON LDAP1 WHILE LDAP2 IS BACK => change is replicated
--------------------------------------------------------------
LDAP1 :
-------
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: slap_queue_csn: queing 0x7fc7333a7220 20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: slap_graduate_commit_csn: removing 0x2fc49a0 20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: syncprov_sendresp: cookie=rid=003,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: syncprov_sendresp: cookie=rid=003,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=003 cookie=rid=003,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=003 CSN too old, ignoring 20120308092429.511872Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=004 cookie=rid=004,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[32686]: do_syncrep2: rid=004 CSN too old, ignoring 20120308092429.511872Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)


LDAP2 :
-------
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=003 cookie=rid=003,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncrepl_message_to_entry: rid=003 DN: uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local, UUID: ad82ba5a-f8c3-1030-97f8-cfd57a135aef
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncrepl_entry: rid=003 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_MODIFY)
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: <= bdb_equality_candidates: (entryUUID) not indexed
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncrepl_entry: rid=003 be_search (0)
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncrepl_entry: rid=003 uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: slap_queue_csn: queing 0xf88940 20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: slap_graduate_commit_csn: removing 0x1494270 20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncrepl_entry: rid=003 be_modify uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local (0)
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: slap_queue_csn: queing 0xf88940 20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncprov_sendresp: cookie=rid=004,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: syncprov_sendresp: cookie=rid=004,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=004 cookie=rid=004,csn=20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: slap_graduate_commit_csn: removing 0x1494890 20120308092429.511872Z#000000#000#000000
Mar  8 10:24:29 srv-xxx-devlinux01 slapd[22602]: do_syncrep2: rid=004 CSN too old, ignoring 20120308092429.511872Z#000000#000#000000 (uid=f.prost@mb-line.com,ou=People,dc=mbweb,dc=local)



And Here is my cn=config ldiff file :

dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /opt/ldap/openldap/var/run/slapd.args
olcPidFile: /opt/ldap/openldap/var/run/slapd.pid
olcToolThreads: 1
structuralObjectClass: olcGlobal
entryUUID: b4a70058-f8b8-1030-8be2-d554f99d0c6e
creatorsName: cn=config
createTimestamp: 20120302133814Z
olcAllows: bind_v2
olcServerID: 1 ldap://192.168.1.110
olcServerID: 2 ldap://192.168.1.111
olcLogLevel: -1
entryCSN: 20120306131358.634858Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120306131358Z
contextCSN: 20120306131358.634858Z#000000#000#000000

dn: cn=module{0},cn=config
objectClass: olcModuleList
cn: module{0}
olcModulePath: /usr/lib/ldap
olcModuleLoad: {0}back_hdb
olcModuleLoad: {1}syncprov
structuralObjectClass: olcModuleList
entryUUID: b4a7cf10-f8b8-1030-8bea-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302142656.502043Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20120302142656Z

dn: cn=schema,cn=config
objectClass: olcSchemaConfig
cn: schema
structuralObjectClass: olcSchemaConfig
entryUUID: b4a71836-f8b8-1030-8be5-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.563193Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120302133814Z

dn: cn={0}core,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: {0}core
olcAttributeTypes: {0}( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: kno
 wledge information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.15{32768} )
olcAttributeTypes: {1}( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (f
 amily) name(s) for which the entity is known by' SUP name )
olcAttributeTypes: {2}( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial numb
 er of the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} )
olcAttributeTypes: {3}( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256: ISO-
 3166 country 2-letter code' SUP name SINGLE-VALUE )
olcAttributeTypes: {4}( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: loc
 ality which this object resides in' SUP name )
olcAttributeTypes: {5}( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2
 256: state or province which this object resides in' SUP name )
olcAttributeTypes: {6}( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC225
 6: street address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreS
 ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
olcAttributeTypes: {7}( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256
 : organization this object belongs to' SUP name )
olcAttributeTypes: {8}( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC '
 RFC2256: organizational unit this object belongs to' SUP name )
olcAttributeTypes: {9}( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated
 with the entity' SUP name )
olcAttributeTypes: {10}( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search gui
 de, deprecated by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 )
olcAttributeTypes: {11}( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: busin
 ess category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15{128} )
olcAttributeTypes: {12}( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal a
 ddress' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.41 )
olcAttributeTypes: {13}( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code
 ' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15{40} )
olcAttributeTypes: {14}( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Off
 ice Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.15{40} )
olcAttributeTypes: {15}( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2
 256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnor
 eSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
olcAttributeTypes: {16}( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Teleph
 one Number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} )
olcAttributeTypes: {17}( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Numb
 er' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 )
olcAttributeTypes: {18}( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC22
 56: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
olcAttributeTypes: {19}( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DE
 SC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.22 )
olcAttributeTypes: {20}( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Addr
 ess' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.36{15} )
olcAttributeTypes: {21}( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256
 : international ISDN number' EQUALITY numericStringMatch SUBSTR numericString
 SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )
olcAttributeTypes: {22}( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: regi
 stered postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41
  )
olcAttributeTypes: {23}( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: d
 estination indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} )
olcAttributeTypes: {24}( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC2256
 : preferred delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALU
 E )
olcAttributeTypes: {25}( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: pr
 esentation address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.43 SINGLE-VALUE )
olcAttributeTypes: {26}( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'RFC
 2256: supported application context' EQUALITY objectIdentifierMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.38 )
olcAttributeTypes: {27}( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a gro
 up' SUP distinguishedName )
olcAttributeTypes: {28}( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the ob
 ject)' SUP distinguishedName )
olcAttributeTypes: {29}( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant
 of role' SUP distinguishedName )
olcAttributeTypes: {30}( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509
 user certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.8 )
olcAttributeTypes: {31}( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA
  certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.8 )
olcAttributeTypes: {32}( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC2256
 : X.509 authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.9 )
olcAttributeTypes: {33}( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC22
 56: X.509 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.9 )
olcAttributeTypes: {34}( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X
 .509 cross certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 0 )
olcAttributeTypes: {35}( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: fir
 st name(s) for which the entity is known by' SUP name )
olcAttributeTypes: {36}( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of s
 ome or all of names, but not the surname(s).' SUP name )
olcAttributeTypes: {37}( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: na
 me qualifier indicating a generation' SUP name )
olcAttributeTypes: {38}( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X
 .500 unique identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.6 )
olcAttributeTypes: {39}( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN qualifi
 er' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 )
olcAttributeTypes: {40}( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: en
 hanced search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 )
olcAttributeTypes: {41}( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: pr
 otocol information' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.42 )
olcAttributeTypes: {42}( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique me
 mber of a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .34 )
olcAttributeTypes: {43}( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: house
 identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
 1.3.6.1.4.1.1466.115.121.1.15{32768} )
olcAttributeTypes: {44}( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: su
 pported algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 )
olcAttributeTypes: {45}( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: de
 lta revocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
olcAttributeTypes: {46}( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' S
 UP name )
olcAttributeTypes: {47}( 2.5.4.65 NAME 'pseudonym' DESC 'X.520(4th): pseudonym
  for the object' SUP name )
olcAttributeTypes: {48}( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbo
 x' ) DESC 'RFC1274: RFC822 Mailbox'   EQUALITY caseIgnoreIA5Match   SUBSTR ca
 seIgnoreIA5SubstringsMatch   SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
olcAttributeTypes: {49}( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainCompone
 nt' ) DESC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match SUBST
 R caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VA
 LUE )
olcAttributeTypes: {50}( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DE
 SC 'RFC1274: domain associated with object' EQUALITY caseIgnoreIA5Match SUBST
 R caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {51}( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'p
 kcs9email' ) DESC 'RFC3280: legacy attribute for email addresses in DNs' EQUA
 LITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.26{128} )
olcObjectClasses: {0}( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP to
 p STRUCTURAL MUST c MAY ( searchGuide $ description ) )
olcObjectClasses: {1}( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP
 top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description )
 )
olcObjectClasses: {2}( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organizat
 ion' SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ b
 usinessCategory $ x121Address $ registeredAddress $ destinationIndicator $ pr
 eferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNu
 mber $ internationaliSDNNumber $  facsimileTelephoneNumber $ street $ postOff
 iceBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ d
 escription ) )
olcObjectClasses: {3}( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an org
 anizational unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide
  $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destination
 Indicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier
  $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ str
 eet $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName
  $ st $ l $ description ) )
olcObjectClasses: {4}( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top
 STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $
 description ) )
olcObjectClasses: {5}( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an o
 rganizational person' SUP person STRUCTURAL MAY ( title $ x121Address $ regis
 teredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $
  teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $  fac
 simileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $
  physicalDeliveryOfficeName $ ou $ st $ l ) )
olcObjectClasses: {6}( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an org
 anizational role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAd
 dress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ telete
 xTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTe
 lephoneNumber $ seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ p
 ostOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $
  st $ l $ description ) )
olcObjectClasses: {7}( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of n
 ames (DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $
 seeAlso $ owner $ ou $ o $ description ) )
olcObjectClasses: {8}( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an res
 idential person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Ad
 dress $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $
 telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDN
 Number $ facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ postOf
 ficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l )
 )
olcObjectClasses: {9}( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an ap
 plication process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ descri
 ption ) )
olcObjectClasses: {10}( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an ap
 plication entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY (
 supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) )
olcObjectClasses: {11}( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system
 agent (a server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformation )
olcObjectClasses: {12}( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP to
 p STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ desc
 ription ) )
olcObjectClasses: {13}( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256
 : a strong authentication user' SUP top AUXILIARY MUST userCertificate )
olcObjectClasses: {14}( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256:
 a certificate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ c
 ertificateRevocationList $ cACertificate ) MAY crossCertificatePair )
olcObjectClasses: {15}( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a gr
 oup of unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uni
 queMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ descript
 ion ) )
olcObjectClasses: {16}( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256:
  a user security information' SUP top AUXILIARY MAY ( supportedAlgorithms ) )
olcObjectClasses: {17}( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP certif
 icationAuthority AUXILIARY MAY ( deltaRevocationList ) )
olcObjectClasses: {18}( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURA
 L MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $ del
 taRevocationList ) )
olcObjectClasses: {19}( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST ( dmdName
 ) MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address
  $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telex
 Number $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumbe
 r $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAd
 dress $ physicalDeliveryOfficeName $ st $ l $ description ) )
olcObjectClasses: {20}( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP
  top AUXILIARY MAY userCertificate )
olcObjectClasses: {21}( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate a
 uthority' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevoca
 tionList $ cACertificate $ crossCertificatePair ) )
olcObjectClasses: {22}( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP
 top AUXILIARY MAY deltaRevocationList )
olcObjectClasses: {23}( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'RFC
 2079: object that contains the URI attribute type' MAY ( labeledURI ) SUP top
  AUXILIARY )
olcObjectClasses: {24}( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject'
  DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPassword )
olcObjectClasses: {25}( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: do
 main component object' SUP top AUXILIARY MUST dc )
olcObjectClasses: {26}( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid obje
 ct' SUP top AUXILIARY MUST uid )
structuralObjectClass: olcSchemaConfig
entryUUID: b4a72d76-f8b8-1030-8be6-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.563737Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120302133814Z

dn: cn={1}cosine,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: {1}cosine
olcAttributeTypes: {0}( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress'
 EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.15{256} )
olcAttributeTypes: {1}( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274: g
 eneral information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )
olcAttributeTypes: {2}( 0.9.2342.19200300.100.1.5 NAME ( 'drink' 'favouriteDri
 nk' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {3}( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC 'RFC1
 274: room number' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {4}( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274:
 photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC 'RFC12
 74: category of user' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {6}( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274: h
 ost computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {7}( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC 'RFC127
 4: DN of manager' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.12 )
olcAttributeTypes: {8}( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier' D
 ESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR
 caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {9}( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC '
 RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {10}( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DES
 C 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSu
 bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {11}( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC
  'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.12 )
olcAttributeTypes: {12}( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DE
 SC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch SUBSTR c
 aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {13}( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTe
 lephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY telephoneNumb
 erMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.50 )
olcAttributeTypes: {14}( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC
 1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.12 )
olcAttributeTypes: {15}( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.39 )
olcAttributeTypes: {16}( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY ca
 seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {17}( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {18}( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {19}( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {20}( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY
 caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {21}( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALIT
 Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {22}( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC
  'RFC1274: DN of entry associated with domain' EQUALITY distinguishedNameMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
olcAttributeTypes: {23}( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' D
 ESC 'RFC1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIg
 noreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
olcAttributeTypes: {24}( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC
 'RFC1274: personal title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {25}( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTel
 ephoneNumber' ) DESC 'RFC1274: mobile telephone number' EQUALITY telephoneNum
 berMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.50 )
olcAttributeTypes: {26}( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelep
 honeNumber' ) DESC 'RFC1274: pager telephone number' EQUALITY telephoneNumber
 Match SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .50 )
olcAttributeTypes: {27}( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCount
 ryName' ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch SUBS
 TR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {28}( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DE
 SC 'RFC1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.15{256} )
olcAttributeTypes: {29}( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus
 ' DESC 'RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR caseI
 gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {30}( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC '
 RFC1274: Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Subst
 ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
olcAttributeTypes: {31}( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption
 ' DESC 'RFC1274: mail preference option' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  )
olcAttributeTypes: {32}( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC '
 RFC1274: name of building' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstrin
 gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
olcAttributeTypes: {33}( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RF
 C1274: DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE )
olcAttributeTypes: {34}( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality'
 DESC 'RFC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SIN
 GLE-VALUE )
olcAttributeTypes: {35}( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQualit
 y' DESC 'RFC1274: Subtree Mininum Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 13 SINGLE-VALUE )
olcAttributeTypes: {36}( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQualit
 y' DESC 'RFC1274: Subtree Maximun Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 13 SINGLE-VALUE )
olcAttributeTypes: {37}( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' D
 ESC 'RFC1274: Personal Signature (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 23 )
olcAttributeTypes: {38}( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'R
 FC1274: DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.12 )
olcAttributeTypes: {39}( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274
 : audio (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} )
olcAttributeTypes: {40}( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' D
 ESC 'RFC1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcObjectClasses: {0}( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson' 'newPilo
 tPerson' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $ rfc822
 Mailbox $ favouriteDrink $ roomNumber $ userClass $ homeTelephoneNumber $ hom
 ePostalAddress $ secretary $ personalTitle $ preferredDeliveryMethod $ busine
 ssCategory $ janetMailbox $ otherMailbox $ mobileTelephoneNumber $ pagerTelep
 honeNumber $ organizationalStatus $ mailPreferenceOption $ personalSignature
 ) )
olcObjectClasses: {1}( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top STRUCT
 URAL MUST userid MAY ( description $ seeAlso $ localityName $ organizationNam
 e $ organizationalUnitName $ host ) )
olcObjectClasses: {2}( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top STRUC
 TURAL MUST documentIdentifier MAY ( commonName $ description $ seeAlso $ loca
 lityName $ organizationName $ organizationalUnitName $ documentTitle $ docume
 ntVersion $ documentAuthor $ documentLocation $ documentPublisher ) )
olcObjectClasses: {3}( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top STRUCTURA
 L MUST commonName MAY ( roomNumber $ description $ seeAlso $ telephoneNumber
 ) )
olcObjectClasses: {4}( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP top
  STRUCTURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber $ l
 ocalityName $ organizationName $ organizationalUnitName ) )
olcObjectClasses: {5}( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top STRUCT
 URAL MUST domainComponent MAY ( associatedName $ organizationName $ descripti
 on $ businessCategory $ seeAlso $ searchGuide $ userPassword $ localityName $
  stateOrProvinceName $ streetAddress $ physicalDeliveryOfficeName $ postalAdd
 ress $ postalCode $ postOfficeBox $ streetAddress $ facsimileTelephoneNumber
 $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $ tel
 exNumber $ preferredDeliveryMethod $ destinationIndicator $ registeredAddress
  $ x121Address ) )
olcObjectClasses: {6}( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP d
 omain STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $ telepho
 neNumber $ physicalDeliveryOfficeName $ postalAddress $ postalCode $ postOffi
 ceBox $ streetAddress $ facsimileTelephoneNumber $ internationalISDNNumber $
 telephoneNumber $ teletexTerminalIdentifier $ telexNumber $ preferredDelivery
 Method $ destinationIndicator $ registeredAddress $ x121Address ) )
olcObjectClasses: {7}( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain
 STRUCTURAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAME
 Record ) )
olcObjectClasses: {8}( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject' D
 ESC 'RFC1274: an object related to an domain' SUP top AUXILIARY MUST associat
 edDomain )
olcObjectClasses: {9}( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP c
 ountry STRUCTURAL MUST friendlyCountryName )
olcObjectClasses: {10}( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SU
 P ( organization $ organizationalUnit ) STRUCTURAL MAY buildingName )
olcObjectClasses: {11}( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STR
 UCTURAL MAY dSAQuality )
olcObjectClasses: {12}( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData'
 SUP top AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $ subtreeMaximu
 mQuality ) )
structuralObjectClass: olcSchemaConfig
entryUUID: b4a7740c-f8b8-1030-8be7-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.565543Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120302133814Z

dn: cn={2}nis,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: {2}nis
olcAttributeTypes: {0}( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; th
 e common name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
olcAttributeTypes: {1}( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolut
 e path to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.26 SINGLE-VALUE )
olcAttributeTypes: {2}( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to th
 e login shell' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.2
 6 SINGLE-VALUE )
olcAttributeTypes: {3}( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY integ
 erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {4}( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {5}( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {6}( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {7}( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY integer
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {8}( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {9}( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY integerMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {10}( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactI
 A5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 26 )
olcAttributeTypes: {11}( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY ca
 seExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.26 )
olcAttributeTypes: {12}( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgr
 oup triple' SYNTAX 1.3.6.1.1.1.0.0 )
olcAttributeTypes: {13}( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY intege
 rMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {14}( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name )
olcAttributeTypes: {15}( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY int
 egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {16}( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integer
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {17}( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address
 ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
olcAttributeTypes: {18}( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP netw
 ork' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SI
 NGLE-VALUE )
olcAttributeTypes: {19}( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netm
 ask' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SI
 NGLE-VALUE )
olcAttributeTypes: {20}( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address'
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
olcAttributeTypes: {21}( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootp
 aramd parameter' SYNTAX 1.3.6.1.1.1.0.1 )
olcAttributeTypes: {22}( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image nam
 e' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {23}( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )
olcAttributeTypes: {24}( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExac
 tIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.26{1024} SINGLE-VALUE )
olcObjectClasses: {0}( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction o
 f an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $ uidNu
 mber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $
 description ) )
olcObjectClasses: {1}( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional a
 ttributes for shadow passwords' SUP top AUXILIARY MUST uid MAY ( userPassword
  $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive
 $ shadowExpire $ shadowFlag $ description ) )
olcObjectClasses: {2}( 1.3.6.1.1.1.2.2 NAME 'posixGroup' DESC 'Abstraction of
 a group of accounts' SUP top STRUCTURAL MUST ( cn $ gidNumber ) MAY ( userPas
 sword $ memberUid $ description ) )
olcObjectClasses: {3}( 1.3.6.1.1.1.2.3 NAME 'ipService' DESC 'Abstraction an I
 nternet Protocol service' SUP top STRUCTURAL MUST ( cn $ ipServicePort $ ipSe
 rviceProtocol ) MAY description )
olcObjectClasses: {4}( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' DESC 'Abstraction of
 an IP protocol' SUP top STRUCTURAL MUST ( cn $ ipProtocolNumber $ description
  ) MAY description )
olcObjectClasses: {5}( 1.3.6.1.1.1.2.5 NAME 'oncRpc' DESC 'Abstraction of an O
 NC/RPC binding' SUP top STRUCTURAL MUST ( cn $ oncRpcNumber $ description ) M
 AY description )
olcObjectClasses: {6}( 1.3.6.1.1.1.2.6 NAME 'ipHost' DESC 'Abstraction of a ho
 st, an IP device' SUP top AUXILIARY MUST ( cn $ ipHostNumber ) MAY ( l $ desc
 ription $ manager ) )
olcObjectClasses: {7}( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' DESC 'Abstraction of a
 n IP network' SUP top STRUCTURAL MUST ( cn $ ipNetworkNumber ) MAY ( ipNetmas
 kNumber $ l $ description $ manager ) )
olcObjectClasses: {8}( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' DESC 'Abstraction of
  a netgroup' SUP top STRUCTURAL MUST cn MAY ( nisNetgroupTriple $ memberNisNe
 tgroup $ description ) )
olcObjectClasses: {9}( 1.3.6.1.1.1.2.9 NAME 'nisMap' DESC 'A generic abstracti
 on of a NIS map' SUP top STRUCTURAL MUST nisMapName MAY description )
olcObjectClasses: {10}( 1.3.6.1.1.1.2.10 NAME 'nisObject' DESC 'An entry in a
 NIS map' SUP top STRUCTURAL MUST ( cn $ nisMapEntry $ nisMapName ) MAY descri
 ption )
olcObjectClasses: {11}( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' DESC 'A device w
 ith a MAC address' SUP top AUXILIARY MAY macAddress )
olcObjectClasses: {12}( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' DESC 'A device
 with boot parameters' SUP top AUXILIARY MAY ( bootFile $ bootParameter ) )
structuralObjectClass: olcSchemaConfig
entryUUID: b4a7a4c2-f8b8-1030-8be8-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.566790Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120302133814Z

dn: cn={3}inetorgperson,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: {3}inetorgperson
olcAttributeTypes: {0}( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC 'RFC279
 8: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR cas
 eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {1}( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC '
 RFC2798: identifies a department within an organization' EQUALITY caseIgnoreM
 atch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {2}( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC 'RFC
 2798: preferred name to be used when displaying entries' EQUALITY caseIgnoreM
 atch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SI
 NGLE-VALUE )
olcAttributeTypes: {3}( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC 'RF
 C2798: numerically identifies an employee within an organization' EQUALITY ca
 seIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.15 SINGLE-VALUE )
olcAttributeTypes: {4}( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC 'RFC2
 798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgn
 oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {5}( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC 'RFC2
 798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )
olcAttributeTypes: {6}( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage' DESC
  'RFC2798: preferred written or spoken language for a person' EQUALITY caseIg
 noreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 15 SINGLE-VALUE )
olcAttributeTypes: {7}( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate' D
 ESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.5 )
olcAttributeTypes: {8}( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC 'RFC2
 798: personal identity information, a PKCS #12 PFX' SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.5 )
olcObjectClasses: {0}( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC 'RFC2
 798: Internet Organizational Person' SUP organizationalPerson STRUCTURAL MAY
 ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName $ em
 ployeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $ ini
 tials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $ photo
 $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $ pre
 ferredLanguage $ userSMIMECertificate $ userPKCS12 ) )
structuralObjectClass: olcSchemaConfig
entryUUID: b4a7c20e-f8b8-1030-8be9-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.567540Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120302133814Z

dn: olcBackend={0}hdb,cn=config
objectClass: olcBackendConfig
olcBackend: {0}hdb
structuralObjectClass: olcBackendConfig
entryUUID: b4a7eb8a-f8b8-1030-8beb-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.568602Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120302133814Z

dn: olcDatabase={-1}frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-1}frontend
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external
 ,cn=auth manage by * break
olcAccess: {1}to dn.exact="" by * read
olcAccess: {2}to dn.base="cn=Subschema" by * read
olcSizeLimit: 500
structuralObjectClass: olcDatabaseConfig
entryUUID: b4a707ec-f8b8-1030-8be3-d554f99d0c6e
creatorsName: cn=config
createTimestamp: 20120302133814Z
entryCSN: 20120302133814.562776Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20120302133814Z

dn: olcDatabase={0}config,cn=config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
olcAccess: {0}to * by dn.exact="uid=syncrepl,dc=mbweb,dc=local" read by * brea
 k
olcAccess: {1}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external
 ,cn=auth manage by * break
olcRootDN: cn=admin,cn=config
structuralObjectClass: olcDatabaseConfig
entryUUID: b4a71250-f8b8-1030-8be4-d554f99d0c6e
creatorsName: cn=config
createTimestamp: 20120302133814Z
olcLimits: {0}dn.exact="uid=syncrepl,dc=mbweb,dc=local" size=unlimited
olcMirrorMode: TRUE
olcRootPW:: e01ENX14RlNvd2dnRm9sUTZydXh5bG5Id0xnPT0=
olcSyncrepl: {0}rid=001 provider="ldap://192.168.1.110"; searchbase="cn=config" ty
 pe=refreshAndPersist bindmethod=simple binddn="uid=syncrepl,dc=mbweb,dc=local
 " credentials="KFD3NJcEhUqRivpPT3jk" retry="30 +" network-timeout=5 timeout=3
 0
olcSyncrepl: {1}rid=002 provider="ldap://192.168.1.111"; searchbase="cn=config" ty
 pe=refreshAndPersist bindmethod=simple binddn="uid=syncrepl,dc=mbweb,dc=local
 " credentials="KFD3NJcEhUqRivpPT3jk" retry="30 +" network-timeout=5 timeout=3
 0
entryCSN: 20120306124955.712590Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20120306124955Z

dn: olcOverlay={0}syncprov,olcDatabase={0}config,cn=config
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: {0}syncprov
olcSpCheckpoint: 100 5
structuralObjectClass: olcSyncProvConfig
entryUUID: 824477d8-f8bf-1030-97f6-cfd57a135aef
creatorsName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
createTimestamp: 20120302142656Z
entryCSN: 20120302142656.507861Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20120302142656Z

dn: olcDatabase={1}hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/ldap/openldap-data
olcSuffix: dc=mbweb,dc=local
olcAccess: {0}to * by dn.exact="uid=syncrepl,dc=mbweb,dc=local" read by * brea
 k
olcAccess: {1}to attrs=userPassword,shadowLastChange by self write by anonymou
 s auth by dn="cn=admin,dc=mbweb,dc=local" write by * none
olcAccess: {2}to dn.base="" by * read
olcAccess: {3}to * by self write by dn="cn=admin,dc=mbweb,dc=local" write by *
  read
olcLastMod: TRUE
olcRootDN: cn=admin,dc=mbweb,dc=local
olcRootPW:: e1NTSEF9RWxlVVpLUm5tSnQxMWo0NGhnOWM3MjFoS2h3czhEa1E=
olcDbCheckpoint: 512 30
olcDbConfig: {0}set_cachesize 0 2097152 0
olcDbConfig: {1}set_lk_max_objects 1500
olcDbConfig: {2}set_lk_max_locks 1500
olcDbConfig: {3}set_lk_max_lockers 1500
olcDbIndex: objectClass eq
structuralObjectClass: olcHdbConfig
entryUUID: b4a7f1b6-f8b8-1030-8bec-d554f99d0c6e
creatorsName: cn=admin,cn=config
createTimestamp: 20120302133814Z
olcLimits: {0}dn.exact="uid=syncrepl,dc=mbweb,dc=local" size=unlimited
olcSyncrepl: {0}rid=003 provider="ldap://192.168.1.110"; searchbase="dc=mbweb,dc=l
 ocal" type=refreshAndPersist bindmethod=simple binddn="uid=syncrepl,dc=mbweb,
 dc=local" credentials="KFD3NJcEhUqRivpPT3jk" retry="30 +" network-timeout=5 t
 imeout=30
olcSyncrepl: {1}rid=004 provider="ldap://192.168.1.111"; searchbase="dc=mbweb,dc=l
 ocal" type=refreshAndPersist bindmethod=simple binddn="uid=syncrepl,dc=mbweb,
 dc=local" credentials="KFD3NJcEhUqRivpPT3jk" retry="30 +" network-timeout=5 t
 imeout=30
olcMirrorMode: TRUE
entryCSN: 20120302142955.629835Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20120302142955Z

dn: olcOverlay={0}syncprov,olcDatabase={1}hdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: {0}syncprov
olcSpCheckpoint: 100 5
structuralObjectClass: olcSyncProvConfig
entryUUID: 82448502-f8bf-1030-97f7-cfd57a135aef
creatorsName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
createTimestamp: 20120302142656Z
entryCSN: 20120302142656.508199Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20120302142656Z



--
FrÃdÃric PROST



-----Message d'origine-----
De : Quanah Gibson-Mount [mailto:quanah@zimbra.com]
EnvoyÃ : mercredi 7 mars 2012 18:02
Ã : PROST FrÃdÃric; openldap-technical@openldap.org
Objet : RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped

--On Wednesday, March 07, 2012 8:06 AM +0100 PROST FrÃdÃric <f.prost@mb-line.com> wrote:

> Hello,
>
> My OpenLDAP version is 2.4.23 (installed with apt-get install slapd on
> Debian Squeeze).

Using 2.4.23 from Debian is a bad decision, for numerous reasons, which have been discussed multiple times on the list.

Please see: <http://www.openldap.org/faq/data/cache/1456.html>

for just a beginning of the reasons as to why this is a bad idea.

--Quanah



--

Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration
Follow-Ups:
- RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
  - From: Quanah Gibson-Mount <quanah@zimbra.com>
- Re: OpenLDAP 2.4 : replication doesn't work when customer is stopped
  - From: Howard Chu <hyc@symas.com>
References:
- RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
  - From: PROST FrÃdÃric <f.prost@mb-line.com>
- RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
  - From: Quanah Gibson-Mount <quanah@zimbra.com>
- RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
  - From: PROST FrÃdÃric <f.prost@mb-line.com>
- RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
  - From: Quanah Gibson-Mount <quanah@zimbra.com>
Prev by Date: Re: Migration of Openldap server from Solaris 8 to 10
Next by Date: [SOLVED] RE: OpenLDAP 2.4 : replication doesn't work when customer is stopped
Index(es):
- Chronological
- Thread