[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Denying access to syncrepl consumere during initial DIT content load

To: Christian Kratzer <ck@cksoft.de>
Subject: Re: Denying access to syncrepl consumere during initial DIT content load
From: Emmanuel Dreyfus <manu@netbsd.org>
Date: Mon, 24 Mar 2014 10:40:18 +0000
Cc: openldap-technical@openldap.org
Content-disposition: inline
In-reply-to: <alpine.BSF.2.00.1403240952400.1298@pohjola.cksoft.de>
References: <alpine.BSF.2.00.1403240952400.1298@pohjola.cksoft.de>
User-agent: Mutt/1.5.23 (2014-03-12)

On Mon, Mar 24, 2014 at 10:11:40AM +0100, Christian Kratzer wrote:
> This is another situation in which it would be nice to be able to disallow
> any ldap connections to a consumere while it is in the initial sync phase.

Any client should be denied during this phase: you do not want to serve
incorrect information.

I have slapd startup script that run slapd on an alternate port until
replication is in sync, then starts normally. But indeed preventing service
while the DIT is incolmplete would be nice.

-- 
Emmanuel Dreyfus
manu@netbsd.org

Follow-Ups:
- Re: Denying access to syncrepl consumere during initial DIT content load
  - From: Michael Ströder <michael@stroeder.com>

References:
- Denying access to syncrepl consumere during initial DIT content load
  - From: Christian Kratzer <ck-lists@cksoft.de>

Prev by Date: Denying access to syncrepl consumere during initial DIT content load
Next by Date: Re: Denying access to syncrepl consumere during initial DIT content load
Index(es):
- Chronological
- Thread