[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: slapd-meta

Il 14/07/2016 14:57, Dirk Kastens ha scritto:

Hi,
does the admin account exist on the meta directory server and does it have the correct access rights? 


  ldapsearch -D "cn=admin,dc=server1,dc=xxxx" -w XXXXXXX -p 389 -h
ldap.server0.xxxx -b "ou=users,dc=server1,dc=xxxx" -s sub "(uid=john)"




Hello,

first of all I'm sorry for the delay but I'm following this activity for
a non-profit org in my spare time, so I need a lot of time to make all
the tests and report the results without breaking their systems.

Your suggestion was correct, I needed to insert a valid RootDN/RootPW in
the meta-DB to make it work. Surprisingly, the server did not give me an
authentication error (this is why I could not understand where my
mistake was residing), but after that it worked.

Now the problem has moved toward a different issue...
As I said in my previous posts, my idea was to put a meta-DB next to the
actual hdb DB on the "dc=loc0,dc=root" slapd but, as far as I can
understand, this is not possible or, at least, I was not able to find a
working configuration.

I tried to create a meta DB at the root of the DIT ("dc=root") and then
to "mount" the local hdb subtree (simply creating the
"dc=local0,dc=root" physical hdb) and the remote sub-trees under that;
then I tried to do the opposite, creating an actual
"(dc=local0,)dc=root" hdb and then "mount" the remote sub-trees using
slapd-meta.
None of them worked, I have always got an error stating that the
"dc=root" base-DN already exists (I don't remember the exact error) when
going to "step 2".

Thus, from what I can understand, it is not possible to perform what I
need. A possible solution could be to create a couple more servers just
for the purpose to run the slapd-meta DB, "mounting" all of the four
actual hdbs exposed by the other servers, and exposing these
meta-servers to the clients.

Are my discoveries correct? Is the last approach feasible/correct? Am I
missing something?

Thank you again for your and the rest of the mailing list people
availability.