RE: Two slapd instances on same db?

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Mads Freek
 
> Is it viable to have two instances of slapd - one read/write and one 
> read only - sharing the same database - I'm using ldbm with 2.1.8?

No.

> My ldapservice is read only except for updates from one host.
> 
> I would like to have TLSVerifyClient = hard for the updates 
> but not for 
> binds from my users. I can't find any other way to do it than running 
> one instance for the updates with TLSVerifyClient = hard and another 
> for the binds and reads with TLSVerifyClient = try.

Leave the TLSVerifyClient setting on "try" and set an ACL that only allows
write access to the DN of the update host's certificate. Use SASL/EXTERNAL
for the update host's bind requests.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support