Re: syncrepl binding DN privileges?

[Pierangelo Masarati <ando@sys-net.it>]

David Markey wrote:
> If im doing multi master replication, what privileges does the bind DN
> need? i know its bad practice to use the manager DN, does the binding
> user need write access to anything on the remote ldap tree or just
> full read access?

- auth privilege (of course);
- read access to what needs to be replicated (might be less than full)
- appropriate size/time limit (e.g. unlimited; see "limits")

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------