dn: olcDatabase={1}mdb,cn=config
changetype: modify
replace: olcSyncrepl
olcSyncrepl:
  rid=003 provider=ldap://ixldap01.example.com bindmethod=sasl
  saslmech=EXTERNAL starttls=yes tls_cacertdir=/etc/openldap/certs
  tls_reqcert=demand tls_crlcheck=all tls_protocol_min=3.3 
  tls_cert=/etc/openldap/certs/cert.pem
  tls_key=/etc/openldap/certs/privkey.pem
  tls_cipher_suite=HIGH:!TLSv1:!SSLv3!aNULL searchbase="o=tutorial"
  type=refreshAndPersist interval=00:00:00:10 retry="10 +"
olcSyncrepl:
  rid=004 provider=ldap://ixldap02.example.com bindmethod=sasl
  saslmech=EXTERNAL starttls=yes tls_cacertdir=/etc/openldap/certs
  tls_reqcert=demand tls_crlcheck=all tls_protocol_min=3.3 
  tls_cert=/etc/openldap/certs/cert.pem
  tls_key=/etc/openldap/certs/privkey.pem
  tls_cipher_suite=HIGH:!TLSv1:!SSLv3!aNULL searchbase="o=tutorial"
  type=refreshAndPersist interval=00:00:00:10 retry="10 +"
-
replace: olcMirrorMode
olcMirrorMode: TRUE

