Re: Openldap and multiples DNS updates (multimaster)

["Pierangelo Masarati" <ando@sys-net.it>]

>> At this point, it's really important to me to know if someone have an
>> experience with multimaster support in a production environment, and if
>> the
>
> My understanding is that multi-master does not work.

Unless anything broke recently, multimaster works from a code standpoint. 
It's the design that's inherently broken, so it shouldn't be used at all. 
I recently played with a simple setup for what was termed "federated"
directory
<http://www.openldap.org/lists/openldap-software/200407/msg00533.html>

You can find some example stuff here
<http://www.sys-net.it/~ando/Download/federatedDSA.tar.gz>.

There's no guarantee that it still works, though.  In that example, the
multimaster feature is used for something else, but you can follow it as a
guideline to setting things up.

Note that the example does not implement a multimaster system.  Each DSA
is simultaneously master and slave, but each DSA is master of its portion
of the tree, and slave for the rest.  So, DSAs are not equivalent,
interchangeable, and do not guarantee any failover write capability.

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it


    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497