[Date Prev][Date Next]
Re: (ITS#7493) slapo-allowed: allowed* attrs are replicated
On Tue, 15 Jan 2013 13:37:06 GMT firstname.lastname@example.org wrote
> Their value depends on ACLs, so in order to reflect ACLs on a specific
> DSA they should be generated; however, I concur ACLs should not depend
> on the specific DSA of a replication setup.
BTW: It does make sense to have different ACLs on different replicas!
Think of a master with fine-grained ACLs for entry management and read-only
consumers with simpler ACLs for better performance.