ldap server guide has issue when copying and pasting Replication and TLS section step 3

[Collin Hayden]

When I go to the section Replication and TLS

"3. On the Consumer,

Configure TLS for Consumer-side replication. Modify the existing olcSyncrepl attribute by tacking on some TLS options. In so doing, we will see, for the first time, how to change an attribute's value(s).

Create the file consumer_sync_tls.ldif with the following contents: "

and try to copy and paste the following into a ldif text file:

dn: olcDatabase={1}hdb,cn=config
replace: olcSyncRepl
olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple
 binddn="cn=admin,dc=example,dc=com" credentials=secret searchbase="dc=example,dc=com"
 logbase="cn=accesslog" logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"
 schemachecking=on type=refreshAndPersist retry="60 +" syncdata=accesslog
 starttls=critical tls_reqcert=demand

It adds addtional characters and ajust spacing because of the html formatting in the last line. When you try to import it into the database, you will get a syntax error and it won't work. I monkey'd with this file for over and hour and finally ended up typing it out by hand and referenced the top replication section which worked. It appears it needs a space at the end of each line in order to be imported properly.

I am using ubuntu 12.04 LTS. I expected to copy and paste and import just like the rest of the doc. Everything else worked great. This will hinder people from getting the TLS to work, since it will concatenate the accesslog and starttls together with no whitespace.

Best Regards,

Collin Hayden

[Doug Smythies (dsmythies)]

reference: auth.xml here:

<programlisting>
dn: olcDatabase={1}hdb,cn=config
replace: olcSyncRepl
olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple
 binddn="cn=admin,dc=example,dc=com" credentials=secret searchbase="dc=example,dc=com"
 logbase="cn=accesslog" logfilter="(&amp;(objectClass=auditWriteObject)(reqResult=0))"
 schemachecking=on type=refreshAndPersist retry="60 +" syncdata=accesslog
 <application>starttls=critical tls_reqcert=demand</application>
</programlisting>

It seems the issue is with application tags inside of a program listing. However, I was able to cut and paste the resulting HTML into both a windows notepad file and a linux nano file without any resulting odd characters. Indeed, I use basic text editors as a cut and paste sanitizer as a matter of routine.

It is not clear to me that there is a bug here, but I don't think "application" tags should be used within a program listing.