Configure OpenLDAP Multi-Master Replication

Configure OpenLDAP Multi-Master Replication. For the Settings of Provider/Consumer, it's impossible to add datas on Consumer server, but if configure this Multi-Master Settings, it's possbile to add on any Master server.
[1]	Configure Basic LDAP Server settings on all server, refer to here.
[2]	Configure like follows on all servers. Add syncprov module.

[root@slapd01 ~]#  vi mod_syncprov.ldif # create new dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: /usr/lib64/openldap olcModuleLoad: syncprov.la [root@slapd01 ~]#  ldapadd -Y EXTERNAL -H ldapi:/// -f mod_syncprov.ldif  SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 adding new entry "cn=module,cn=config" [root@slapd01 ~]#  vi syncprov.ldif # create new dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov olcSpSessionLog: 100 [root@slapd01 ~]#  ldapadd -Y EXTERNAL -H ldapi:/// -f syncprov.ldif  SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 adding new entry "olcOverlay=syncprov,olcDatabase={2}hdb,cn=config"

[3]	Configure like follows on all servers. But only the parameters "olcServerID" and "provider=***", set different value on each server.

[root@slapd01 ~]#  vi master01.ldif # create new dn: cn=config changetype: modify replace: olcServerID # specify uniq ID number on each server olcServerID: 0 dn: olcDatabase={2}hdb,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001    # specify another LDAP server's URI provider=ldap://10.0.0.50:389/ bindmethod=simple    # own domain name binddn="cn=Manager,dc=server,dc=world"    # directory manager's password credentials=password searchbase="dc=server,dc=world"    # includes subtree scope=sub schemachecking=on type=refreshAndPersist    # [retry interval] [retry times] [interval of re-retry] [re-retry times] retry="30 5 300 3"    # replication interval interval=00:00:05:00 - add: olcMirrorMode olcMirrorMode: TRUE dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov [root@slapd01 ~]#  ldapmodify -Y EXTERNAL -H ldapi:/// -f master01.ldif  SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config" modifying entry "olcDatabase={2}hdb,cn=config" adding new entry "olcOverlay=syncprov,olcDatabase={2}hdb,cn=config"

[4]	Configure LDAP Client to bind all LDAP server.

[root@www ~]#  authconfig --ldapserver=slapd01.server.world,slapd02.server.world --update