SQL configuration backends

There is 2 types of SQL configuration backends for LemonLDAP::NG:

CDBI: very simple storage (recommended)
RDBI: triple store storage (not recommended)

Tip

You can use any database engine if it provides a Perl Driver. You will find here examples for MySQL and PostgreSQL, but other engines may also work.

See how to change configuration backend.

MySQL

Perl Driver

You need DBD::MySQL Perl module:

Debian:

apt install libdbd-mysql-perl

Red Hat:

yum install perl-DBD-MySQL

Database and table creation

Create database:

CREATE DATABASE lemonldap-ng CHARACTER SET utf8;

Use database to create table:

use lemonldap-ng

CDBI

CREATE TABLE lmConfig (
    cfgNum int not null primary key,
    data longtext
);

RDBI

CREATE TABLE lmConfig (
    cfgNum int(11) NOT NULL,
    field varchar(255) NOT NULL DEFAULT '',
    value longtext,
    PRIMARY KEY (cfgNum,field)
    );

Grant access

You have to grant read/write access for the manager component. Other components needs just a read access. You can also use the same user for all.

Tip

You can use different dbiUser strings:

one with read/write rights for servers hosting the manager
one with just read rights for other servers

For example (suppose that our servers are in 10.0.0.0/24 network):

GRANT SELECT,INSERT,UPDATE,DELETE,LOCK TABLES ON lemonldap-ng.lmConfig
  TO lemonldaprw@manager.host IDENTIFIED BY 'mypassword';
GRANT SELECT ON lemonldap-ng.lmConfig
  TO lemonldapro@'10.0.0.%' IDENTIFIED BY 'myotherpassword';

Connection settings

Change configuration settings in /etc/lemonldap-ng/lemonldap-ng.ini file (section configuration):

[configuration]
type = CDBI
dbiChain    = DBI:mysql:database=lemonldap-ng;host=1.2.3.4
dbiUser     = lemonldaprw
dbiPassword = mypassword
; optional
dbiTable    = mytablename

PostGreSQL