[Lug-bg] N-Way Multimaster tiered ldap (slapd)

[Vladimir Vitkov <vvitkov@xxxxxxxxx>]

Здравейте група,

Искам да видя дали правилно съм си конструирал схемата с лдапи-те та погледнете и кажете

ldap: slapd-2.4.28

Ситуация:

 * 3 географски отделени дейта центъра - AWS

 * във всеки има по 4 лдап сървъра

Какво целим:
 * tier 1 - N-Way Multimaster репликация - по един мастър в регион

 * tier 2 - N-Way Multimaster репликация между 4те лдап-а в регион

конфигурация - tier 1 (Всеки сървър има различно ServerID)

syncrepl rid=101

provider=ldap://ldap-mm-1-1:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=testing,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

syncrepl rid=201

provider=ldap://ldap-mm-2-1:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=testing,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

syncrepl rid=301

provider=ldap://ldap-mm-3-1:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=testing,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

mirrormode on

Конфигурация - tier 2 - всеки сървър има различно ServerID

syncrepl rid=301

provider=ldap://ldap-mm-3-1:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=testing,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

syncrepl rid=302

provider=ldap://ldap-mm-3-2:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=testing,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

syncrepl rid=311

provider=ldap://ldap-mm-3-3:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=testing,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

syncrepl rid=312

provider=ldap://ldap-mm-3-4:389

type=refreshAndPersist

retry="60 +"

interval=00:00:00:15

searchbase="dc=тестинг,dc=com"

filter="(objectClass=*)"

scope=sub

schemachecking=off

bindmethod=simple

binddn="cn=ldapsync,ou=People,dc=testing,dc=com"

credentials=secret

mirrormode on

Въпроси:

 * Валидна ли ми е схемата?

 * Забравил ли съм нещо (да имам индекси и пуснат TLS за сигурност просто е орязано от конфига)?

--
С уважение,
Владимир Витков

http://www.netsecad.com
http://www.supportbg.com

_______________________________________________
Lug-bg mailing list
Lug-bg@xxxxxxxxxxxxxxxxxx
http://linux-bulgaria.org/mailman/listinfo/lug-bg