Synchronizing two mirror mode clusters

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Subject: Synchronizing two mirror mode clusters

From: Clément OUDOT <clem.oudot@gmail.com>

Date: Fri, 17 Oct 2014 18:23:39 +0200

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=URmmhH38wvhwSxH5iUGLR6KMHXY138hNlERUCIDyFIY=; b=ttL/P3jwZKVTTF3Bz7Shp5E9CycN1QWqUuEWZqt6UI6H/q5HqiUc3OcZpP04QufrFD y/WyXl8t3NcB9DlehynmWwXdTAttE7Ei2AY01Gyp2j59TgBfgQ0Dc4x3h6focq+VRwbA KC3xPuSfua0livB4PcxbhrmDvM/EDPC++LJhgbv30TOigTTrS0TXJ9IQhbMR0QuRLDw0 yIpL3NPPyT7fngQDeHe0zHJeg3uc4scvvV/CHy0U6URlhEOCcmRGXlTW2pU85RE+8Byx xop66xMYiklHXtcNrsAWKnJQI994XGWqW08fqjUA3IChFWeyhThZRaGWuw2MRFnvQYVI zE5A==

Hi,

I need to set up a backup OpenLDAP cluster and I am looking for advices on the best solutions to achieve it.

The situation is:

* A mirror mode cluster on one geographical site

* A mirror mode cluster on another geographical site (backup site)

* I would prefer not to impact configuration of main cluster
* I think that full multi-master on different geographical site is not the best solution (but maybe I am totally wrong on this point)

The backup site must be in sync with the main site.

Here are my two ideas:

* Configure a syncrepl client to main cluster on each node of the backup cluster. Question is: will not be conflicts as each node of the backup cluster is already synced with the other backup node?

* Configure a LDAP proxy (back-ldap) to backup cluster, with syncrepl client to main cluster. But would back-ldap be able to write operational attributes to backup cluster?

I imagine that some of you already have such needs, could you share your experience?

Thanks,

Clément.