# shadow; hidden
database bdb
suffix "dc=example,dc=com" hidden (*)
syncrepl ...
# translucent; visible
database bdb
suffix "dc=example,dc=com"
overlay translucent
translucent relay (*)
relay "dc=example,dc=com" hidden (*)
Commands with (*) are not valid right now; I'm just trying to see how
things could be implemented.
- the "suffix <namingcontext> hidden" would mark a database as "hidden";
since it's a syncrepl, it would sync with some remote one, but it wouldn't
be directly accessible.
- the "translucent relay" would instruct the translucent overlay to use an
instance of back-relay instead of the default back-ldap to proxy
- the "relay <namingcontext> hidden" would instruct the back-relay to
proxy a specific database that is "hidden"; this would allow it to lookup
a database that otherwise cannot be found by regular select_backend().
Operations within the "dc=example,dc=com" naming context would be served
by the second database, the public one, and would pass thru the
translucent overlay to allow local writes before accessing the "hidden"
shadow database.