N-Way Multimaster tiered ldap (slapd)

Здравейте група,

Искам да видя дали правилно съм си конструирал схемата с лдапи-те та
погледнете и кажете

ldap: slapd-2.4.28

Ситуация:
 * 3 географски отделени дейта центъра - AWS
 * във всеки има по 4 лдап сървъра

Какво целим:
 * tier 1 - N-Way Multimaster репликация - по един мастър в регион
 * tier 2 - N-Way Multimaster репликация между 4те лдап-а в регион

конфигурация - tier 1 (Всеки сървър има различно ServerID)

syncrepl rid=101
provider=ldap://ldap-mm-1-1:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=testing,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

syncrepl rid=201
provider=ldap://ldap-mm-2-1:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=testing,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

syncrepl rid=301
provider=ldap://ldap-mm-3-1:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=testing,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

mirrormode on

Конфигурация - tier 2 - всеки сървър има различно ServerID

syncrepl rid=301
provider=ldap://ldap-mm-3-1:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=testing,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

syncrepl rid=302
provider=ldap://ldap-mm-3-2:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=testing,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

syncrepl rid=311
provider=ldap://ldap-mm-3-3:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=testing,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

syncrepl rid=312
provider=ldap://ldap-mm-3-4:389
type=refreshAndPersist
retry="60 +"
interval=00:00:00:15
searchbase="dc=тестинг,dc=com"
filter="(objectClass=*)"
scope=sub
schemachecking=off
bindmethod=simple
binddn="cn=ldapsync,ou=People,dc=testing,dc=com"
credentials=secret

mirrormode on


Въпроси:
 * Валидна ли ми е схемата?
 * Забравил ли съм нещо (да имам индекси и пуснат TLS за сигурност просто е
орязано от конфига)?

-- 
С уважение,
Владимир Витков

http://www.netsecad.com
http://www.supportbg.com

_______________________________________________
Lug-bg mailing list
Lug-bg-R/uZOSXD/[email protected]
http://linux-bulgaria.org/mailman/listinfo/lug-bg