Re: readonly means readonly no matter what?

[Bob Tanner <tanner@real-time.com>]

Quoting Stephan Siano (stephan.siano@suse.de):
> > What wins? :-)
> 
> readonly on always wins. You won't even be able to replicate into that 
> database. BTW: your by * read ACL is never executed :-)

Hmmm, this post is misleading then. 

http://www.openldap.org/lists/openldap-software/200006/msg00250.html

It would seem that binding as rootdn allows you to write, but as anything else
you get readonly access.

IF readonly always wins, then how do you make a readonly replica?

Turn readonly off and use ACLs to limit the writes?

-- 
Bob Tanner <tanner@real-time.com>       | Phone : (952)943-8700
http://www.mn-linux.org                 | Fax   : (952)943-8500
Key fingerprint =  6C E9 51 4F D5 3E 4C 66 62 A9 10 E5 35 85 39 D9