dn: olcDatabase={0}config,cn=config
changetype: modify
replace: olcSyncrepl
olcSyncrepl:
  rid=001 provider=ldap://ixldap01.example.com bindmethod=sasl 
  saslmech=EXTERNAL starttls=yes tls_cacertdir=/etc/openldap/certs
  tls_reqcert=demand tls_crlcheck=all tls_protocol_min=3.3 
  tls_cert=/etc/openldap/certs/cert.pem
  tls_key=/etc/openldap/certs/privkey.pem
  tls_cipher_suite=HIGH:!TLSv1:!SSLv3!aNULL searchbase="cn=config"
  type=refreshAndPersist interval=00:00:00:10 retry="10 +"
olcSyncrepl:
  rid=002 provider=ldap://ixldap02.example.com bindmethod=sasl
  saslmech=EXTERNAL starttls=yes tls_cacertdir=/etc/openldap/certs
  tls_reqcert=demand tls_crlcheck=all tls_protocol_min=3.3 
  tls_cert=/etc/openldap/certs/cert.pem
  tls_key=/etc/openldap/certs/privkey.pem
  tls_cipher_suite=HIGH:!TLSv1:!SSLv3!aNULL searchbase="cn=config"
  type=refreshAndPersist interval=00:00:00:10 retry="10 +"
-
replace: olcMirrorMode
olcMirrorMode: TRUE

