[CentOS] How to merge many LDAP Servers to the One Server

Fri Apr 22 06:10:51 UTC 2011
Devin Reade <gdr at gno.org>

sync <jiannma at gmail.com> wrote:

>  I have many LDAP Servers which are 389 LDAP Server  on different network .
> So I want to merge them to the one server.
> Could someone can give some suggestions?

Really broad strokes:

This can work if:
     - All the servers you're trying to merge are using consistent schema.
       If they're not, it's a lost cause.
     - The existing servers are serving different parts of
       the DIT hierarchy, and that there is no overlap.

First of all, I wouldn't go down to a single server.  As a minimum have
one slave, or doing maintenance on your LDAP server will bring down 
many network services unnecessarily (as would an unplanned outage).
If you have satellite offices, at least one replica per site (preferably
two) is good.

The easiest way to do it is to prepare your new master, then dump the
ldif from each of your old masters, then load those into the new master.
Make sure you have schema checking turned on.  Then configure your
new replicas to use the new master.  Then cut over your clients.
Add in suitable testing at all stages.

If you have different administrative requirements for the different part
of the DIT, configure your ACLs before you import the ldif into the 
new master.

Detailed explanations available at my standard consulting rates ;)
(Just joking, I don't have the spare cycles right now.)

I got food poisoning today. I don't know when I'll use it.
							- Stephen Wright