Yes, concerning the OpenLDAP configuration everything should be fine.
I had some trouble with the db on one machine:
root# /usr/lib/openldap/slapd -u ldap -g ldap -h 'ldaps:// ldap://' -d 256
@(#) $OpenLDAP: slapd 2.3.39 (Dec 5 2007 10:48:13) $
root@demo2:/var/tmp/portage/net-nds/openldap-2.3.39-r1/work/openldap-2.3.39/servers/slapd
WARNING: No dynamic config support for overlay unique.
WARNING: No dynamic config support for overlay refint.
bdb(dc=dev,dc=pardus,dc=de): Program version 4.5 doesn't match environment version 0.66
bdb_db_open: Database cannot be opened, err -30972. Restore from backup!
and had to run a recovery:
db4.5_recover -v -h /var/lib/openldap-data/
chown -R ldap\: /var/lib/openldap-data/
I did not really investigate this further so I'm just posting this as a precaution.
Thanks for the note about the masking and the keywords. I guess you right and I'll remove them.
Cheers,
Gunnar