From a27358df41c5740e61f22c03ab77c347ffeb2a0a Mon Sep 17 00:00:00 2001
From: Dan Fandrich <dan@coneharvesters.com>
Date: Sat, 16 Dec 2023 14:50:32 -0800
Subject: Disable LDAP backup on slave

The master is backed up and is the source of reference, and the slave
backup was just throwing up errors due to missing packages.
---
 modules/openldap/manifests/slave.pp             |  2 +-
 modules/openldap/templates/ldap-slave.sysconfig | 38 +++++++++++++++++++++++++
 2 files changed, 39 insertions(+), 1 deletion(-)
 create mode 100644 modules/openldap/templates/ldap-slave.sysconfig

(limited to 'modules/openldap')

diff --git a/modules/openldap/manifests/slave.pp b/modules/openldap/manifests/slave.pp
index 7b22587f..bbc65f48 100644
--- a/modules/openldap/manifests/slave.pp
+++ b/modules/openldap/manifests/slave.pp
@@ -14,6 +14,6 @@ class openldap::slave($rid) inherits openldap {
     }
 
     Openldap::Config['/etc/sysconfig/ldap'] {
-        content => template('openldap/ldap.sysconfig'),
+        content => template('openldap/ldap-slave.sysconfig'),
     }
 }
diff --git a/modules/openldap/templates/ldap-slave.sysconfig b/modules/openldap/templates/ldap-slave.sysconfig
new file mode 100644
index 00000000..6ac9055a
--- /dev/null
+++ b/modules/openldap/templates/ldap-slave.sysconfig
@@ -0,0 +1,38 @@
+# debug level for slapd
+SLAPDSYSLOGLEVEL="0"
+SLAPDSYSLOGLOCALUSER="local4"
+
+# SLAPD URL list 
+SLAPDURLLIST="ldap:/// ldaps:/// ldapi:///"
+
+# Config file to use for slapd
+#SLAPDCONF=/etc/openldap/slapd.conf
+
+# Which user to run as
+#LDAPUSER=ldap
+#LDAPGROUP=ldap
+
+# Should file permissions on database files be fixed at startup. Default is yes
+# FIXPERMS=no
+
+# Whether database recovery should be run before starting slapd in start 
+# (not strictly be necessary in 2.3). Default is no
+# AUTORECOVER=yes
+
+# At what intervals to run ldap-hot-db-backup from cron, which will
+# do hot database backups for all bdb/hdb databases, and archive
+# unnecessary transaction logs, one of hourly,daily,weekly,monthly,yearly
+# Default is daily
+# Slave does not need a backup
+RUN_DB_BACKUP=never
+
+# How many days to keep archived transaction logs for. This should be just
+# greater than the backup interval on these files. Default is 7
+# KEEP_ARCHIVES_DAYS=7
+
+# How many files slapd should be able to have open. By default, the process
+# will inherit the default per-process limit (usually 1024), which may
+# not be enough, so ulimit -n is run with the value in MAXFILES (which
+# defaults to 1024 as well). 4096 is the maximum OpenLDAP will use without 
+# recompiling.
+# MAXFILES=4096
-- 
cgit v1.2.1