Re: distributing subtrees, referrals

[OpenLDAP <Info@OpenLDAP.org>]

At 05:09 PM 1/7/00 -0600, Jim.Greer@AUTOZONE.COM wrote:
>
>
>I'm stuck - could somebody give me a hand?
>
>I'm trying to get a couple of slapd's to refer to one another for certain
>queries.
>One server is rooted at dc=autozone, dc=com
>I've added various entries to it and everything is working swimmingly.
>
>Some of the entries are organizationalUnits, arranged in a hierarchy:
>     ou=4, dc=autozone, dc=com
>     ou=SouthEast, ou=4, dc=autozone, dc=com
>     ou=Memphis, ou=SouthEast, dc=autozone, dc=com
                               ^ ou=4 ?

>I've also added a smart referral entry pointing to another
>organizationalUnit on the other server
>
>"ref=ldap://otherserver/ou=S0003,ou=Memphis,ou=SouthEast,ou=4,dc=autozone,d
>c=com". ou=Memphis,ou=SouthEast,ou=4,dc=autozone,dc=com
       ^ s/\./,/

>Questions:
>
>1) In slapd.conf, should the rootdn on "otherserver" be of the form:
>     rootdn    "cn=root, dc=autozone, dc=com"
>OR
>     rootdn    "cn=root, ou=S0003,
>ou=Memphis,ou=SouthEast,ou=4,dc=autozone,dc=com"

The rootdn of each database should be within the database.

>That is, is the rootdn a local rootdn or not?

RootDN are local to databases and servers.  That is, each database has a
separate rootdn and they can differ between services which share the same
database (through replication).

>2) On otherserver in slapd.conf, should suffix be set to the subtree root?
>e.g.
>     suffix    ou=S0003, ou=Memphis,ou=SouthEast,ou=4,dc=autozone,dc=com

Given your referral, yes.


>Problem:
>     If the suffix is set of the subtree, how do I add the initial root
>entry for otherserver?

By superior referral.  Set your default referal to the superior of otherserver.

>It seems to be looking for the ou=S0003,......,dc=com context, which
>doesn't exist yet.
>
>
>3) On otherserver in slapd.conf, I have a referral entry
>referral       ldap://masterserver.autozone.com/
>
>All the examples I've seen of referral merely state a server name.
>Do I need to provide some kind of context here?
>e.g.

No.

>referral       ldap://masterserver.autozone.com/dc=autozone, dc=com
>OR
>referral       ldap://masterserver.autozone.com/ou=Memphis, .....
>,dc=autozone,dc=com
>[ the parent of the local subtree ]
>
>Any helpful answers to these questions would be appreciated,
>
>Jim Greer
>
>
>