Re: quick question about a slave openldap server

[Turbo Fredriksson <turbo@bayour.com>]

>>>>> "Andreas" == Andreas Hasenack <andreas@conectiva.com.br> writes:

    Andreas> A slave server has to be read-only, right?

It doesn't _HAVE_ to be, but it _SHOULD_ be (security reasons).

    Andreas> Who are the
    Andreas> ones that can nevertheless write to it? rootdn and
    Andreas> updatedn?

UpdateDN (only!)

    Andreas> If I create a new user for the replication and give this
    Andreas> user write access to the database via ACLs, will it be
    Andreas> able to write to the database even with it being a slave
    Andreas> server?

I don't know if the bug have been fixed, but in the earlier 2.0 series,
it was not possible to make the replica read-only. I therefor have my
slave read-write.

The problem with having a read-write'able slave is that if any modification
on it is done manually (ie, not via the replication process) that change
will exist ONLY (!!) on the slave.. Not quite intended, right?

If you have the slave read-only, NO modification is possible, only the
replication daemon can write to it...