[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL OTP and syncrepl

To: masarati@aero.polimi.it (Pierangelo Masarati)
Subject: Re: SASL OTP and syncrepl
From: manu@netbsd.org (Emmanuel Dreyfus)
Date: Fri, 19 Feb 2010 07:53:09 +0100
Cc: openldap-devel@openldap.org
In-reply-to: <4B7BB92D.2030406@aero.polimi.it>
User-agent: MacSOUP/2.7 (unregistered for 1126 days)

Pierangelo Masarati <masarati@aero.polimi.it> wrote:

> I'm not a fan of OTP, but I believe this problem is worth being 
> discussed not only with respect to OTP, but also because it may share
> issues with other auth methods where the directory stores auth-related
> data (like SASL auxprops).
> 
> When everything is set up correctly, a client should not direct binds
> with this type of mech to a replica.

A simple solution in the single master situation is to redirect any SASL
OTP bind to the master. As far as I understand, we have no way of
configuring this right now, it needs at add some code, right?

The multi-master setup is much more complicated to get done right.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org

Follow-Ups:
- Re: SASL OTP and syncrepl
  - From: Emmanuel Dreyfus <manu@netbsd.org>

References:
- Re: SASL OTP and syncrepl
  - From: Pierangelo Masarati <masarati@aero.polimi.it>

Prev by Date: Re: SASL OTP and syncrepl
Next by Date: Re: SASL OTP and syncrepl
Index(es):
- Chronological
- Thread