Assignment 3: LDAP Replication [OPTIONAL]

Configuration of the openLDAP service in “Multi-Master” mode of replication (Syncrepl)

Under report. Delivery + ok --> + 0,35 in EC score.

In this module, we are going to configure the LDAP service to deploy an interesting LDAP feature; Syncrepl replication. We will consider a simple N-Way Multi-Master stage, where we will use 2 VMs running slapd services, both in “master” mode. So, we will get both of them can handle LDAP queries in reading and writing mode, in addition to replicate data one each other.

As in previous work, create a new machine image before starting this assignment.

1. Remember to keep the VM off

2. Call it server-01-p1a3 (for example)

Server schema:

To configure the LDAP service in replication mode, we need the service to be running on 2 different servers. So, you will have to clone the server-01 VM. (server-02):

1. Create a new virtual instance in GCP using the server-01-p1a3 new image.

   
2. server-02 instanve features:

   • Modify the hostname to server-02.

   • Default custom network:

     • IP: 10.128.0.12

     • External IP: None

   • Availability policies:

     • VM provisioning model: Spot

     

• Reconfigure the (daemon) LDAP service configuration to start up the ldap and ldapi instance services using host name server-02.localdomain

• IMPORTANT: Make sure that on both servers, the /etc/hosts file includes the corresponding entries for each of the machines;

  • <IP> server-01.localdomain server-01 #(on server-02)

  • <IP> server-02.localdomain server-02 #(on server-01)

New configuration in both LDAP servers:

Add to the necessary configuration of both LDAP services (LDAP configuration DIT), everything required to ensure that they can synchronize their DITs (Configuration and DATA) in N-way Multi-Master mode. You should use only the ldap instance (unsecure) to sync both slapd services.

At least, try to replicate the DIT configuration (cn=config). If you achieve this, you just have to add a new config item, as an index, for checking.

Checking:

1. Using a .ldif file, create a new user (user3) in the LDAP directory on server-01. Once this has been done, check the result of a global search (ldapsearch) of all the LDAP entries, from both LDAP servers.

   • uidNumber: 20002

   • gidNumber: 2000

   • password: <strong password>

More details in references [7][8][9]

Once you have finished the assignment, revert to the previous snapshot server-01-­­­P1A3.