RE: commit: ldap/servers/slapd/back-monitor back-monitor.h database.c init.c proto-back-monitor.h

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: Pierangelo Masarati [mailto:ando@sys-net.it]

> > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd/back-monitor
> >
> > Modified Files:
> > 	back-monitor.h  1.31 -> 1.32
> > 	database.c  1.40 -> 1.41
> > 	init.c  1.70 -> 1.71
> > 	proto-back-monitor.h  1.16 -> 1.17
> >
> > Log Message:
> > Added readOnly attribute, can be toggled on individual databases.
>
> Howard,
>
> this change is very interesting since it opens many new scenarios even
> before back-config is available.  I wonder why you don't
> allow editing of
> readOnly for the entire server as well; is there a specific
> reason, or you think it's not important?

A much simpler reason - if you set the Global readOnly flag, there is no
possible way to reset it, because all subsequent LDAPModify requests will be
rejected.

I considered also disallowing changes to the readOnly flag on the
back-monitor backend itself, to prevent accidentally locking yourself out in
the same way. Will probably make this change as a safety measure.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support