Re: Problem with replica.

[Paul Shevtsov <paul@Dongorbank.COM>]

On Wed, Nov 15, 2006 at 10:21:39AM +0100, Pierangelo Masarati wrote:
> Please keep replies on the mailing list.
			Sorry. Certainly.

> >		packets.
> >		This is native ldapadd. :(
> >  
> This question has been asked (and answered!) so many times...  OpenLDAP 
> tools solve the problem of authenticated referral chasing by delegating 
> it to the user.  They simply return a referral and don't even try to 
> chase it anonymously (as supposed to be useless for writes) nor by 
> propagating credentials to the referred DSA (it would be a very poor 
> decision, as the client has no means to determine whether the referred 
> DSA is trusted or not; or, whenever distributed authentication is 
> implemented, it is very likely that the referred DSA has no means to 
> authenticate an otherwise valid user for the initially contacted DSA.
		Ok - so if i have correctly undesrtood - this not mistake,
		this is a feature. :)

		And my config's - correct?

 
> >			And again any packets on master side.
> >
> >		I should solve a problem of synchronization of passwords
> >		for samba from slave to master LDAP.
> >		And not find the decision. :(
> >
> >		Help me please.... :)
> >		Where i am mistaken?
> >
> >  
> I think OpenLDAP has little to do with smbldap-useradd; however, it 
> looks like that that tool is working as expected, since it behaves the 
> same as ldapadd...
			Also it is a question for other maillist?
			:)
			

> 
> p.
> 

-- 
	Paul Shevtsov       <> 380-62-3327312 
        <Dongorbank>        <> paul@dongorbank.com