slapd.conf:

include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema
include         /usr/local/etc/openldap/schema/samba.schema
include         /usr/local/etc/openldap/schema/corba.schema
include         /usr/local/etc/openldap/schema/local.schema
include         /usr/local/etc/openldap/schema/pgp-keyserver.schema
include         /usr/local/etc/openldap/schema/pgp-recon.schema
include         /usr/local/etc/openldap/schema/pgp-remte-prefs.schema

loglevel 256

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
moduleload      back_bdb
moduleload      syncprov

sizelimit 500

#######################################################################
# BDB database definitions
#######################################################################

backend         bdb
database        bdb
suffix          "dc=mylocaldomain,dc=ru"
rootdn          "cn=root,dc=mylocaldomain,dc=ru"
rootpw          {SSHA}xxxxxxxxxxxxxxxxxxxxx

directory       /var/db/openldap-data

replica host=172.16.0.69:389
    binddn="cn=replicator,dc=mylocaldomain,dc=ru"
    bindmethod=simple
    credentials=xxxxxxxxx

overlay syncprov
syncprov-checkpoint 10 10
syncprov-sessionlog 100

# let PGP discover the keystore base DN
access to dn="cn=pgpServerInfo,dc=mylocaldomain,dc=ru"
    by * read

access to dn.subtree="ou=PGP Keys,dc=mylocaldomain,dc=ru"
    by peername.ip=xxx.xxx.xxx.xxx write
    by peername.ip=xxx.xxx.xxx.xxx write
    by peername.ip=xxx.xxx.xxx.xxx write
    by peername.ip=127.0.0.1 write
    by * read

access to attrs=userPassword
    by dn="cn=root,dc=mylocaldomain,dc=ru" write
    by self write
    by anonymous auth
    by * none

access to attrs=sambaLMPassword,sambaNTPassword
    by dn="cn=root,dc=mylocaldomain,dc=ru" write
    by self write
    by anonymous auth
    by * none

access to *
    by dn="cn=root,dc=mylocaldomain,dc=ru" write
    by self write
    by * read

index   objectClass,uid,uidNumber,gidNumber     eq
index   cn,mail,surname,givenname               eq,subinitial
index   sambaSID                                eq
index   sambaPrimaryGroupSID                    eq
index   sambaDomainName                         eq
index   entryCSN                                eq
index   entryUUID                               eq