Open jouveits opened 2 years ago
Hey!
openldap::server::overlay { 'syncprov on olcDatabase={2}mdb,cn=config': ensure => present, options => { 'olcSpCheckpoint' => '100 10', 'olcSpSessionlog' => '100' }, }
Hum… Should probably be like :monocle_face: :
openldap::server::overlay { 'syncprov on dc=example,dc=com':
ensure => present, # ^^^^^^^^^^^^^^^^^
options => { # the suffix
'olcSpCheckpoint' => '100 10',
'olcSpSessionlog' => '100'
},
}
The (working) configuration I am trying to obtain is this one:
dn: olcOverlay=syncprov,olcDatabase={2}mdb,cn=config
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: syncprov
olcSpCheckpoint: 100 10
olcSpSessionLog: 100
So enabling the syncprov overlay on the mdb database I want to synchronize, as mentioned in the openldap documentation: https://www.openldap.org/doc/admin24/guide.html#N-Way%20Multi-Provider
I tried the one you suggested, but I'm not obtaining the desired result.
Same behaviour in version 6.0.0, you aren't able to add an overlay with suffix olcDatabase={2}hdb,cn=config
.
Okay, giving it another try reveals, after looking into openldap_overlay, following example
openldap::server::overlay { 'ppolicy on dc=example,dc=net':
ensure => present,
options => {
'olcPPolicyDefault' => 'cn=default,ou=policies,dc=example,dc=net',
'olcPPolicyForwardUpdates' => 'FALSE',
'olcPPolicyHashCleartext' => 'TRUE',
'olcPPolicyUseLockout' => 'FALSE'
},
}
produces expected result in database:
# {0}ppolicy, {2}hdb, config
dn: olcOverlay={0}ppolicy,olcDatabase={2}hdb,cn=config
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcPPolicyConfig
olcOverlay: {0}ppolicy
olcPPolicyDefault: cn=default,ou=policies,dc=example,dc=net
olcPPolicyHashCleartext: TRUE
olcPPolicyUseLockout: FALSE
olcPPolicyForwardUpdates: FALSE
I would suggest closing this issue, if it is not used to improve the docu.
:+1: for improving any documentation! Can you please contribute some example based on your experience in a PR :grin: ?
Using an "overlay on suffix" title for the
openldap::server::overlay
ends up with an incorrect suffix ("[]", see below). Is seems that the title is incorrectly parsed.Using the
suffix
attributes provides the same result.Affected Puppet, Ruby, OS and module versions/distributions
How to reproduce
What are you seeing
What behaviour did you expect instead
Obtained
dn
should be something likedn: olcOverlay=syncprov,olcDatabase={2}mdb,cn=config