Ldap 双主搭建

LDAP单机搭建，可以按照之前的LDAP安装进行搭建

一、2台服务器安装依赖syncprov模块

# vi syncprov_mod.ldif

dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulePath: /usr/lib64/openldap
olcModuleLoad: syncprov.la

# ldapadd -Y EXTERNAL -H ldapi:/// -f syncprov_mod.ldif

# vi syncprov.ldif

dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: syncprov
olcSpSessionLog: 100

# ldapadd -Y EXTERNAL -H ldapi:/// -f syncprov.ldif

二、2台服务器配置连接

# vi master01.ldif

dn: cn=config
changetype: modify
replace: olcServerID
# specify uniq ID number on each server
olcServerID: 0

dn: olcDatabase={2}hdb,cn=config
changetype: modify
add: olcSyncRepl
olcSyncRepl: rid=001
provider=ldap://192.168.100.194:389/
bindmethod=simple
binddn=”cn=admin,dc=ileiming,dc=com”
credentials=123456
searchbase=”dc=ileiming,dc=com”
scope=sub
schemachecking=on
type=refreshAndPersist
retry=”30 5 300 3″
interval=00:00:05:00
–
add: olcMirrorMode
olcMirrorMode: TRUE

dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config
changetype: add
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: syncprov

# ldapmodify -Y EXTERNAL -H ldapi:/// -f master01.ldif

# vi master02.ldif

dn: cn=config
changetype: modify
replace: olcServerID
# specify uniq ID number on each server
olcServerID: 1

dn: olcDatabase={2}hdb,cn=config
changetype: modify
add: olcSyncRepl
olcSyncRepl: rid=001
provider=ldap://192.168.100.193:389/
bindmethod=simple
binddn=”cn=admin,dc=ileiming,dc=com”
credentials=123456
searchbase=”dc=ileiming,dc=com”
scope=sub
schemachecking=on
type=refreshAndPersist
retry=”30 5 300 3″
interval=00:00:05:00
–
add: olcMirrorMode
olcMirrorMode: TRUE

dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config
changetype: add
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: syncprov

# ldapmodify -Y EXTERNAL -H ldapi:/// -f master02.ldif

转载请注明：LINUX服务器运维架构技术分享 » Ldap 双主搭建