Re: permissions replication

[Miroslav Misek <miroslav.misek@netgarden.cz>]

Hi,

one more question please about cn=config replication.
When I set it up, it will override local olcDatabase={2}hdb,cn=config. 
By which I will gain olcAccess records, which I need,
but at the same time I will loose olcSyncRepl attribute for 
olcDatabase={2}hdb,cn=config no? This attribute does not exist at master 
server.

Thanks,
Miroslav Misek


On 4.7.2018 13:50, Christian Kratzer wrote:
> Hi,
>
> On Sun, 1 Jul 2018, Miroslav Misek wrote:
>
> > Hi,
> >
> > I am setting up master-slave replication for our off-site office, so 
> > it can use authentication against ldap even with internet 
> > connectivity issues.
> > Replication itself is working without problems. But it replicates 
> > only data and not olcAccess attributes on database. So I have to set 
> > them manually.
> >
> > Please is there any way to replicate those attributes too?
> >
> > I found only one way, and it is master-master replication of 
> > cn=config database.
> > And it is not usable in our environment. Off-site office don`t have 
> > public ip. And it is better for me to have this ldap instance read-only.
>
> you can setup replication for cn=config identically to how you setup 
> replication for your data.
>
> If you can replicate your data by pulling from the master you can do 
> the same for cn=config.
>
> Greetings
> Christian