Secure replication

2017-05-05 Thread Real, Elizabeth (392K) 
Hey guys,

I’m running multi-master OpenLDAP (version 2.4.40) servers and need to secure 
replication. Can you point me to where I can find that information? What I 
found online is old and does not apply to the version I’m running.

The olcSyncRepl directive on both systems needs to go from:
olcSyncRepl: rid=001 provider=ldap
to:
olcSyncRepl: rid=001 provider=ldaps

Thank you,
Liz

[SOLVED] Re: chain overlay does an anonymous bind and ignores the chain binddn (v2.4.44)

2017-05-05 Thread mailing lists 

 


> mailing lists wrote:
> > I am testing the chain overlay from a read-only slave (consumer) slapd 
> > server
> > to a read-write master (provider), but what I am seeing is an anonymous bind
> > from the consumer to the provider instead of the authorization identity
> > configurated in the chain directive.
> 
> Have you successfully run test032 in the test suite? Have you compared your 
> config to the config used in that test?

the chain works as expected, with the identity configurated, if the port is not 
included in the updatedn.

[SOLVED] Re: Unable to load the lastbind module with 2.4.44 (custom build)

2017-05-05 Thread mailing lists 



> What I'm trying to do is enable the lastbind module in a centos7 server, so I 
> applied this patch to the rpmbuild process:
the patch needs add "-DSLAPD_OVER_LASTBIND=SLAPD_MOD_DYNAMIC" to the options 
list.