Year: 2020

OpenLDAP N-Way MultiMaster Replication

Jovan Stosic April 16, 2020 
dn: olcDatabase={1}hdb,cn=config
changetype: modify
add: olcSuffix
olcSuffix: dc=test,dc=local
-
add: olcRootDN
olcRootDN: cn=admin,dc=test,dc=local
-
add: olcRootPW
olcRootPW: {SSHA}SGq737yNactRCyMY70TDTQs6V1wzMRD6
-
add: olcSyncRepl
olcSyncRepl: rid=004 provider=ldap://ldap1.test.local binddn="cn=admin,dc=test,dc=local" bindmethod=simple
  credentials=test searchbase="dc=test,dc=local" type=refreshOnly
  interval=00:00:00:10 retry="5 5 300 5" timeout=1
olcSyncRepl: rid=005 provider=ldap://ldap2.test.local binddn="cn=admin,dc=test,dc=local" bindmethod=simple
  credentials=test searchbase="dc=test,dc=local" type=refreshOnly
  interval=00:00:00:10 retry="5 5 300 5" timeout=1
olcSyncRepl: rid=006 provider=ldap://ldap3.test.local binddn="cn=admin,dc=test,dc=local" bindmethod=simple
  credentials=test searchbase="dc=test,dc=local" type=refreshOnly
  interval=00:00:00:10 retry="5 5 300 5" timeout=1
-
add: olcMirrorMode
olcMirrorMode: TRUE

Source: linuxlasse.net :: OpenLDAP N-Way MultiMaster Replication

Re: viewing cn=config

Jovan Stosic April 16, 2020 
How do I get to see the contents of cn=config?



There are two main methods that I know of and for both you have to be logged in as root. First:


  ~# slapcat -b cn=config




Slapd does not even have to be running. This command will dump the entire configuration, but you can also filter its output:


  ~# slapcat -b cn=config -a cn=config

This will show only the root object. However:

  ~# slapcat -b cn=config -a "(|(cn=config)(olcDatabase={1}hdb))"

This will show both the root object and the hdb database definition.

Second method:

  ~# ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config

Again, you can also filter the output:

  ~# ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config cn=config

  ~# ldapsearch -Y EXTERNAL -H ldapi:/// -b cn=config \
     "(|(cn=config)(olcDatabase={1}hdb))"


 


Source: Re: viewing cn=config