[Fedora-directory-users] DNA MultiMaster
Sorry if this already posted, I seem to be having trouble with email today.
I have read the following pages and cannot exactly figure out how to do
what I want.
http://directory.fedoraproject.org/wiki/DNA_Plugin
http://www.redhat.com/docs/manuals/dir-server/8.1/admin/dna.html
I have 2 companies I want to set ranges for company 1gets range
uidNumber and gidNumber 1Million - (2Million -1) and Company 2 gets
Range uidNumber and gidNumber 2 Million - (3Million -1). DIT layout is
{ou=people,ou=groups,ou=ranges}, ou= Company{1,2}, dc=example, dc=com.
I Setup company 1 on master1 with the following ldifs.
dn: ou=Ranges,ou=Company1 dc=example, dc=com
objectclass: top
objectclass: extensibleObject
objectclass: organizationalUnit
ou: Ranges
dn: cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
changetype: modify
replace: nsslapd-pluginEnabled
nsslapd-pluginEnabled: on
dn: cn=Company1 Account UIDs,cn=Distributed Numeric Assignment
Plugin,cn=plugins,cn=config
objectClass: top
objectClass: extensibleObject
cn: Company1 Account UIDs
dnatype: uidNumber
dnafilter: (objectclass=posixAccount)
dnascope: ou=Company1 , dc=example,dc=com
dnanextvalue: 1000000
dnaMaxValue: 1000500
dnasharedcfgdn: cn=Company1 Account UIDs,ou=Ranges,dc=example,dc=com
dnathreshold: 100
dnaRangeRequestTimeout: 60
dnaMagicRegen: magic
dnaNextRange: 1000501 - 1999999
I then repeat this on master2 but then when I add users to both servers
Master1 hands out uidNumber = 1 and Master2 hands out uidNumber = 1 for
their first adds and keep adding numbers incrementing by one thus
overlapping numbers. For gidNumber I basically use the same Ldifs
except I substitue Group UID for Account UID and gidNumber for uidNumber.
User add ldif looks as the following
dn: uid=test,ou=people,ou=Region1, dc=example,dc=com
objectClass: posixAccount
objectClass: shadowAccount
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: test
gecos: test
gidNumber: magic
givenName: test
homeDirectory: /home/test
loginShell: /bin/bash
mail: test(a)example.com
o: test
shadowLastChange: 14098
shadowMax: 99999
shadowWarning: 7
sn: test
uid: test
uidNumber: magic
userPassword:: <password>
Question is what I am doing wrong?
Server is Redhat DS 8.1 on rhel 5 64bit.
Thanks
Edward