forked from ISTI-ansible-roles/ansible-roles
36 lines
958 B
Plaintext
36 lines
958 B
Plaintext
|
dn: cn=module,cn=config
|
||
|
|
objectClass: olcModuleList
|
||
|
|
cn: module
|
||
|
|
olcModulePath: /usr/lib/ldap
|
||
|
|
olcModuleLoad: syncprov
|
||
|
|
|
||
|
|
dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config
|
||
|
|
objectClass: olcOverlayConfig
|
||
|
|
objectClass: olcSyncProvConfig
|
||
|
|
olcOverlay: syncprov
|
||
|
|
olcSpSessionLog: 100
|
||
|
|
|
||
|
|
dn: olcDatabase={1}hdb,cn=config
|
||
|
|
changetype: modify
|
||
|
|
add: olcDbIndex
|
||
|
|
olcDbIndex: entryUUID eq
|
||
|
|
-
|
||
|
|
add: olcSyncRepl
|
||
|
|
olcSyncRepl: rid={{ openldap_slave_id | default(001) }}
|
||
|
|
provider={{ openldap_master_ldap_uri }}
|
||
|
|
bindmethod=simple
|
||
|
|
binddn="cn={{ openldap_replica_user }},{{ openldap_base_dn }}"
|
||
|
|
credentials={{ slapd_replica_pwd }}
|
||
|
|
searchbase="{{ openldap_slave_search_base }}"
|
||
|
|
logbase="cn=accesslog"
|
||
|
|
schemachecking=on
|
||
|
|
type={{ openldap_slave_sync_type }}
|
||
|
|
retry="60 +"
|
||
|
|
interval={{ openldap_slave_sync_interval }}
|
||
|
|
starttls="{{ openldap_slave_tls_starttls: }}"
|
||
|
|
syncdata={{ openldap_slave_syncdata_type }}
|
||
|
|
-
|
||
|
|
add: olcUpdateRef
|
||
|
|
olcUpdateRef: {{ openldap_master_ldap_uri }}
|
||
|
|
|