################## Provider #####################

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/domainorgperson.schema
include         /etc/openldap/schema/radius.schema
include         /etc/openldap/schema/qmail.schema

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args


overlay         chain

chain-uri       ldap://consumer.domain.com:389
chain-rebind-as-user    TRUE
chain-idassert-bind     bindmethod=simple
                        binddn="cn=Manager,dc=domain,dc=com"
                        credentials=secret
                        mode=self



database bdb
suffix "dc=domain,dc=com"
rootdn "cn=Manager,dc=domain,dc=com"
rootpw secret
        directory       /var/lib/openldap-data
        password-hash   {CLEARTEXT}
        index           objectClass     eq
        index           uid             eq
        index           mail            eq
        index           mailAlternateAddress    eq
        index           accountStatus   eq
        checkpoint      32      30 # <kbyte> <min>
        dbcachesize     30000000
        cachesize       300000
        sizelimit       unlimited


####################################

overlay chain
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

####################################

______________________________________________________________________________________________________









############## Consumer ##########


include		/etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/domainorgperson.schema
include         /etc/openldap/schema/radius.schema
include		/etc/openldap/schema/qmail.schema

pidfile		/var/run/openldap/slapd.pid
argsfile	/var/run/openldap/slapd.args


########################

verlay          chain
chain-uri       ldap://provider.domain.com:389
chain-rebind-as-user    TRUE
chain-idassert-bind     bindmethod=simple
                	binddn="cn=Manager,dc=domain,dc=com"
			credentials=secret
			mode=self

########################

database bdb
suffix "dc=domain,dc=com"
rootdn "cn=Manager,dc=domain,dc=com"
rootpw secret
	directory	/var/lib/openldap-data
	password-hash 	{CLEARTEXT}
	index   	objectClass     eq
	index   	uid             eq
	index   	mail            eq
	index   	mailAlternateAddress    eq
	index		accountStatus	eq
	checkpoint	32	30 # <kbyte> <min>
	dbcachesize     30000000
	cachesize       300000
	sizelimit 	unlimited
	





########################
syncrepl rid=2
	provider=ldap://provider.domain.com:389
	type=refreshAndPersist
	retry=1,1,1,1,1,5,5,6,30,+
	interval=00:00:00:30
	searchbase="dc=domain,dc=com"
	filter="(objectclass=*)"
	scope=sub
	attrs="*"
	schemachecking=on
	binddn="cn=Manager,dc=domain,dc=com"
	bindmethod=simple
	credentials="secret"
	sizelimit=unlimited
updateref ldap://provider.domain.com:389

overlay syncprov
########################






######################################
# logs file
######################################
set_lg_regionmax       262144
set_lg_bsize           2097152
set_lg_dir             "/var/log/openldap/slapd.log"