Antw: Re: Denying access to syncrepl consumere during initial DIT content load

["Ulrich Windl" <Ulrich.Windl@rz.uni-regensburg.de>]

Hi!

Stupid question: If syn is based on entryUUID and entryCSN and objects are
transferred in transactions, how can an obsolete or incomplete object exist on
a server that is to be synced?

Regards,
Ulrich

>>> Michael StrÃder<michael@stroeder.com> schrieb am 24.03.2014 um 12:03 in
Nachricht <53301109.9070703@stroeder.com>:
> Emmanuel Dreyfus wrote:
>> On Mon, Mar 24, 2014 at 10:11:40AM +0100, Christian Kratzer wrote:
>>> This is another situation in which it would be nice to be able to
disallow
>>> any ldap connections to a consumere while it is in the initial sync
phase.
>> 
>> Any client should be denied during this phase: you do not want to serve
>> incorrect information.
>> 
>> I have slapd startup script that run slapd on an alternate port until
>> replication is in sync, then starts normally.
> 
> How do you detect that replication is in sync?
> Do you look at the contextCSN attribute?
> 
> Ciao, Michael.