[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: commit: ldap/servers/slapd/overlays accesslog.c



At 05:00 PM 12/23/2006, Howard Chu wrote:
>Kurt D. Zeilenga wrote:
>>It might be more appropriate to handle this issue on the
>>consumer than the provider.  An arbitrary LDAP sync client
>>might want this and other DSA specific attributes included
>>in the content.  That is, the provider should not assume
>>the consumer is doing server-to-server replication.
>
>True. The problem was that the auditContext attribute wasn't defined on the consumer. There's no obvious way to configure a consumer to exclude unknown attributes,

Personally, I think this kind of problem is better solved by
configuration then by code.  Configuration wise, this can be
addressed on either consumer side via a narrower attrs list,
or on the provider side with an ACL.

Kurt