Full_Name: Christian Kratzer
Version: HEAD
OS: CentOS 6.4
URL: http://www.cksoft.de/paste/34e81be96925e5ea28daea7da2b84b09049f7f3d/0001-Allow-authTimestamp-updates-to-be-forwarded-via-upda.patch
Submission from: (NULL) (2003:41:c010:8001:8de8:2245:8dd7:5c5e)



I, Christian Kratzer, hereby place the following modifications to OpenLDAP
Software (and only these modifications) into the public domain. Hence, these
modifications may be freely used and/or redistributed for any purpose with or
without attribution and/or other notice. 

I have adapted code from slapo-ppolicy to slapo-lastbind from contrib to allow
forwarding of updates to authTimestamp via updateref and chaining.

The patch introduces a new lastbind_forward_updates (olcLastBindForwardUpdates )
boolean parameter to slapo-lastbind that has the same semantics as
ppolicy_forward_updates (olcPPolicyForwardUpdates) in slapo-ppolicy.

I have a 2 master, 2 slave syncrepl test setup which chaining from the slaves to
the masters ( to one of them to be precise ).

- Bind on master1 results in authTimestamp getting replicated to master2 and
both slaves.

- Bind on slave1 with olcLastBindForwardUpdates=TRUE results in authTimestamp
getting forwarded to the master with updateRef and chaining and replicated from
there.

Please review especially the one from ppolicy I did not merge marked with TODO.

Greetings
Christian