[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldapmodify when using syncrepl fails due to referral (ITS#2715)

--On Thursday, September 11, 2003 6:00 PM -0400 Jonghyuk Choi 
<jongchoi@us.ibm.com> wrote:

>> You are saying the slave needs to have access to bind to the master?  So
>> each slave needs permission to bind to the master to read the data it
>> needs?
> yes. just like ordinary search requests...

Okay, that is a major departure from how things were done previously via 
slurpd (slurpd had to have permission to bind to the slave).  Well, that 
makes things interesting.  I'll have to figure out how we want to set that 
up on our end, as it means we now have to run a process to get kerberos 
tickets on all the replica's, and grant them access into the master, which 
they previously didn't have.


Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html