OCF_HEARTBEAT_SLAPD(7)

💖 OCF_HEARTBEAT_SLAPD 💖

okay bestie, gather round, because today we're talking about ocf_heartbeat_slapd from the OCF resource agents collection — it's giving "manages a Stand-alone LDAP Daemon (slapd) instance" and honestly? iconic. 🫶

---

✨ NAME ✨

ocf_heartbeat_slapd — literally here to manage a Stand-alone LDAP Daemon (slapd) instance. that's the whole job. she's a specialist. 💅

---

🌸 SYNOPSIS 🌸

slapd [start | stop | monitor | meta-data | validate-all]

look at her. five little actions. no cap, that's the entire vibe. ✨

---

🦋 DESCRIPTION 🦋

so basically this is a resource script for the Stand-alone LDAP Daemon (slapd), and what it does is manage a slapd instance as an OCF resource. that's it, that's the tweet. she shows up, she runs your slapd, she plays nice with your cluster. main character energy fr fr. 👑

---

🎀 SUPPORTED PARAMETERS 🎀

these are the knobs, bestie. turn them wisely. 🔥

• slapd — full path to the slapd binary, like for example "/usr/sbin/slapd". (optional, string, default "/usr/sbin/slapd")
• ldapsearch — full path to the ldapsearch binary, e.g. "/usr/bin/ldapsearch". (optional, string, default "ldapsearch")
• config — full path to a slapd configuration directory OR a slapd configuration file. examples being "/etc/ldap/slapd.d" or "/etc/ldap/slapd.conf". (unique, optional, string, no default)
• pidfile — the file we read the PID from; if you don't set it, it gets read from olcPidFile/pidfile inside the config. (optional, string, no default)
• user — user name or id that slapd will run as. heads up: the group id ALSO gets changed to this user's gid, unless you use the group parameter to override that. (optional, string, no default)
• group — group name or id that slapd will run with. (optional, string, no default)
• services — the LDAP (and other scheme) URLs that slapd will serve. like, for example, "ldap://127.0.0.1:389 ldaps:/// ldapi:///". (unique, optional, string, default "ldap:///")
• watch_suffix — the suffix (database backend) that gets monitored for availability. you can do multiple suffixes by giving a space separated list. 🫶 important: if you provide one or more suffixes here, the ignore_suffix parameter is discarded. if you leave it blank, ALL suffixes get monitored. (optional, string, no default)
• ignore_suffix — the suffix (database backend) that will NOT be monitored for availability. multiple ones? space separated list, bestie. leave it blank and no suffix gets excluded. (optional, string, no default)
• bind_dn — Distinguished Name used to bind to the LDAP directory for testing purposes. leave it blank and you bind to the LDAP directory anonymously. 🕵️‍♀️ (optional, string, no default)
• password — password used to bind to the LDAP directory for testing. (optional, string, no default)
• parameters — slapd may be called with extra parameters, and any of them go right here. (optional, string, no default)
• stop_escalate — how many seconds to wait for shutdown (using SIGTERM) before resorting to SIGKILL. 😭 dramatic but necessary. (optional, integer, default 15)
• maxfiles — maximum number of open files (for ulimit -n). (optional, string, no default)

---

⭐ SUPPORTED ACTIONS ⭐

this resource agent supports the following actions (operations), and yes she serves:

1. start — starts the resource. suggested minimum timeout: 20s.
2. stop — stops the resource. suggested minimum timeout: 20s.
3. monitor — performs a detailed status check. suggested minimum timeout: 20s. suggested interval: 60s.
4. validate-all — performs a validation of the resource configuration. suggested minimum timeout: 20s.
5. meta-data — retrieves resource agent metadata (internal use only, don't touch). suggested minimum timeout: 5s.

---

🌈 EXAMPLE CRM SHELL 🌈

here's what a slapd resource config looks like using the crm(8) shell — copy it, love it, run it:

primitive p_slapd ocf:heartbeat:slapd \
  op monitor depth="0" timeout="20s" interval="60s"

---

🍓 EXAMPLE PCS 🍓

and here's the same energy using pcs(8):

pcs resource create p_slapd ocf:heartbeat:slapd \
  op monitor OCF_CHECK_LEVEL="0" timeout="20s" interval="60s"

---

👀 SEE ALSO 👀

• http://clusterlabs.org/

iykyk. go read it. 💜

---

🧚 AUTHOR 🧚

ClusterLabs contributors (see the resource agent source for information about individual authors). shoutout to the whole crew, they ate and left no crumbs. 👑

---

💀 no cap: this page is from resource-agents version UNKNOWN, dated 04/08/2026. that's the whole lore. now go forth and cluster responsibly, bestie. 🦋✨💖