[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: [Q] can I replicate several branches to the same slave from one master?
- To: "Quanah Gibson-Mount" <quanah@symas.com>
- Subject: Re: [Q] can I replicate several branches to the same slave from one master?
- From: "Zeus Panchenko" <zeus@ibs.dn.ua>
- Date: Fri, 30 Jun 2017 08:08:31 +0300
- Cc: openldap-technical@openldap.org
- Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWxsbGdnZ3U1NQTExN cXFzx8fG/v7+f8hyWAAACXUlEQVQ4jUWSwXYiIRBFi4yyhtjtWpmRdTL0ZC3TJOukDa6Rc+T/P2F eFepwtFvr8upVFVDua8mLWw6La4VIKTuMdAPOebdU55sQs3n/D1xFFPFGVGh4AHKttr5K0bS6g7N ZCge7qpVLB+f1Z2WAj2OKXwIWt/bXpdXSiu8KXbviWkHxF5td9+lg2e3xlI2SCvatK8YLfHyh9lw 15yrad8Va5eXg4Llr7QmAaC+dL9sDt9iad/DX3OKvLMBf+dm0A0QuMrTvYIevSik1IaSVvgjIHt5 lSCG2ynNRpEcBZ8cgDWk+Ns99qzsYYV3MZoppWzGtYlTO9+meG6m/g92iNO9LfQB2JZsMpoJs7QG ku2KtabRK0bZRwDLyBDvwlxTm6ZlP7qyOqLcfqtLexpDSB4M0H3I/PQy1emvjjzgK+A0LmMKl6Lq zlqzh0VGAw440F6MJd8cY0nI7wiF/fVIBGY7UNCAXy6DmfYGCLLI0wtDbVcDUMqtJLmAhLqODQAe riERAxXJ1/QYGpa0ymqyytpKC19MNXHjvFmEsfcHIrncFR4xdbYWgmfEGLCcZokpGbGj1egMR+6M 1BkNX1pDdhPcOXpAnAeLQUwQLYepgQoZVNGS61yaE8CYA7gYAcWKzwGstACY2HTFvvOwk4FXAG/a mKHni/EcA/GkOk7I0IK7UMIf3+SahU8/FJdiE7KcuWdM3MFocUDEEIX9LfJoo4xV5tnNKc3jJuSs SZWgnnhepgU1zN4Hii18yW4RwDX52CXUtk0Hqz6cHOIUkWaX8fDcB+J7y1y2xDHwjv/8Buu8Ekz6 7tXQAAAAASUVORK5CYII=
- In-reply-to: Your message of Thu, 29 Jun 2017 17:30:37 -0700 <0E269F8C84B9E78512EDD464@[192.168.1.30]>
- Organization: I.B.S. LLC
- References: <20170627010438.33399@relay.ibs.dn.ua> <WM!778a4deb87ae8f4aec4adbf3dacc05317d4fc574b3889939c06e85d8867011c4f81a61b1af92af1548f5b583d1c5ab0c!@mailstronghold-3.zmailcloud.com> <0E269F8C84B9E78512EDD464@[192.168.1.30]>
Quanah Gibson-Mount <quanah@symas.com> wrote:
>
> Wouldn't it be simpler to define ACLs on the master that limit what
> the replication identity has access to that matches your filters?
>
emm ... I was sure I can not do that on the master side ... just I try
do that, I receive full data ...
looks like some more permittive acl works for the replica ... can I
somehow know which acl matched the replica? But I was trying to place
replABC ACLs to the end of the list and still was not able to limit data
according the filter
> I would also note that your stanza limiting what attrs are replicated
> is missing the operational attributes that are necessary for sync
> replication to function, so I would fully expect errors.
do you mean entryCSN and entryUUID ?
> unique, as documented in the man page. Given that OpenLDAP functions
> off of CSN values, partial replication is tricky, as the master can
> then have a contextCSN that does not correspond to anything in a
> partially replicated database, depending on how you slice it.
>
I was sure I understood the documentation ...
--
Zeus V. Panchenko jid:zeus@im.ibs.dn.ua
IT Dpt., I.B.S. LLC GMT+2 (EET)