Syncrepl: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 11: Zeile 11:
 
  olcTLSCertificateFile: /etc/ldap/ssl/slave.linnugs.de.crt
 
  olcTLSCertificateFile: /etc/ldap/ssl/slave.linnugs.de.crt
 
  olcTLSCertificateKeyFile: /etc/ldap/ssl/slave.linuggs.de.key
 
  olcTLSCertificateKeyFile: /etc/ldap/ssl/slave.linuggs.de.key
=stoppen von slapd=
+
=einspielen der datenbank=
*slave:$ service slapd stop
+
*slave:$ rm -r /etc/ldap/slapd.d/*
 
+
*slave:$ slapadd -F /etc/ldap/slapd.d -b cn=config -l config.ldif
rm -r /etc/ldap/slapd.d/*
+
*slave:$ chown -R openldap.openldap /etc/ldap/slapd.d
 
+
*slave:$ slave:$ service slapd start
 
 
 
 
slapadd -F /etc/ldap/slapd.d -b cn=config -l config.ldif
 
 
 
chown -R openldap.openldap /etc/ldap/slapd.d
 

Version vom 18. Dezember 2014, 12:13 Uhr

ldap master

dump the config database to a text file

  • master:$ slapcat -F /etc/ldap/slapd.d -b cn=config -l config.ldif

kopieren auch den slave

  • master:$ scp config.ldif slave:

ldap slave

  • slave:$ service slapd stop

anpassen der TLS parameter

config.ldif

olcTLSCACertificateFile: /etc/ldap/ssl/lin-ca.crt
olcTLSCertificateFile: /etc/ldap/ssl/slave.linnugs.de.crt
olcTLSCertificateKeyFile: /etc/ldap/ssl/slave.linuggs.de.key

einspielen der datenbank

  • slave:$ rm -r /etc/ldap/slapd.d/*
  • slave:$ slapadd -F /etc/ldap/slapd.d -b cn=config -l config.ldif
  • slave:$ chown -R openldap.openldap /etc/ldap/slapd.d
  • slave:$ slave:$ service slapd start