Re: OpenLDAP end Replication of olcAccess

[Francesco Malvezzi <francesco.malvezzi@unimore.it>]

[...]
> 
> Anyone can Helf where my issue is?

pardon, just some general thinkings.

In my opinion it is not possibile to partially replicate a entry, so
either you replicate the whole
dn: olcDatabase={1}hdb,cn=config
or nothing.

In order to replicate acl I would not do that. I would replicate
dn: olcDatabase={-1}frontend,cn=config

I am un-aware of the implication of acl rule overlap between
olcDatabase={-1}frontend and olcDatabase={1}hdb, so I would advise not
to add acl to
olcDatabase={1}hdb
except an explicit "allow-all" rule and do all the access control on
olcDatabase={-1}frontend

I didn't try that by myself so please just accept this as a starting point

ciao,

Francesco