LDAP + Synchro partial + ACL

[paco699]

Hello all,


I have 3 servers running openldap, in n-way mode.

i search to synchronize branchs or parts of my master ldap to my slaves ldap with the ACLs on the master (olcAccess).

For example:
-synchronize ou=People & ou=Groups to slave1
-synchronize ou=DHCP Servers to slave2

i'm reading the man slapd.access & i'm testing but its not trivial documentation.

Can someone help me?


Thanks very much!


paco699

[paco699]

Hello all,


I found a solution to do that with 'filter=' in syncrepl of the slave server:

olcSyncrepl: {0}rid=
		provider=ldap://ldap-1.example.com			 						
                binddn="cn=admin,dc=example,dc=com"
		bindmethod=simple 
		credentials=password 		
		searchbase="dc=example,dc=com" 
		filter="(|(entryDN:dnSubtreeMatch:=ou=People,dc=example,dc=com)(entryDN:dnSubtreeMatch:=ou=Groups,dc=example,dc=com))"
		type=refreshAndPersist 
		interval=00:00:00:10 retry="5 5 100 +" 
		timeout=3

But i search again with the ACLs.