# Example of a simple server with manual certificate management.
pki_prefix="/usr/local/etc/pki/realms/ldap.camilion.cloud"
__openldap_server \


    --manager-dn 'cn=manager,dc=camilion,dc=cloud' \


    --manager-password "foo" \


    --manager-password-hash '{SSHA}foo' \


    --serverid 0 \


    --suffix 'dc=camilion,dc=cloud' \


    --slapd-url 'ldaps://ldap.camilion.cloud' \


    --tls-cert "${pki_prefix}/default.crt" \


    --tls-privkey "${pki_prefix}/default.key" \


    --tls-ca "${pki_prefix}/CA.crt"
# The created basedn looks as follows:
#
# dn: dc=camilion,dc=cloud
# objectClass: top
# objectClass: dcObject
# objectClass: organization
# o: Managed by cdist, do not edit manually.
# dc: camilion
#
# Do not change it manually, the type will overwrite your changes.
#
# Changing to a replicated setup is a simple change to something like:
#
# Example for multiple servers with replication and automatic
# Let's Encrypt certificate management through certbot.
id=1
for host in ldap-test1.ungleich.ch ldap-test2.ungleich.ch; do


    echo "__ungleich_ldap \


        --manager-dn 'cn=manager,dc=ungleich,dc=ch' \


        --manager-psasword 'foo' \


        --manager-password-hash '{SSHA}fooo' \


        --serverid '${id}' \


        --suffix 'dc=ungleich,dc=ch' \


        --slapd-url ldap://${host} \


        --searchbase 'dc=ungleich,dc=ch' \


        --syncrepl-credentials 'fooo' \


        --syncrepl-host 'ldap-test1.ungleich.ch' \


        --syncrepl-host 'ldap-test2.ungleich.ch' \


        --description 'Ungleich LDAP server'" \


        --staging \


        | cdist config -i - -v ${host}


    id=$((id + 1))
done
# The created basedn looks as follows:
#
# dn: dc=ungleich,dc=ch
# objectClass: top
# objectClass: dcObject
# objectClass: organization
# o: Ungleich LDAP server
# dc: ungleich
#
# Do not change it manually, the type will overwrite your changes.