[Date Prev][Date Next]
Re: (ITS#7766) Account unlocked in slave after two modifications on a master (overlay ppolicy)
- To: openldap-its@OpenLDAP.org
- Subject: Re: (ITS#7766) Account unlocked in slave after two modifications on a master (overlay ppolicy)
- From: firstname.lastname@example.org
- Date: Thu, 19 Dec 2013 08:53:22 GMT
- Auto-submitted: auto-generated (OpenLDAP-ITS)
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
Content-Type: TEXT/PLAIN; charset=UTF-8; format=flowed
On Wed, 18 Dec 2013, ClÃ©ment OUDOT wrote:
> I sent it by mail but I think it is too big and queued. So here is all
> configuration and test result:
I have not worked trhough all your examples and configs yet as I am
travelling at the moment but things seem quite clear to me.
The password lock from you slaves never arrives on your master as you
have not configured referrals or any other kind of replication of state
from your slave to your master.
That means the data on the masters and the slaves is inconsistent.
As syncrepl as you use it always replaces the entire entry any changes
from the master will complelete overrite anything on the slaves.
There is no merging of data in syncrepl.
This is working as designed and is not a bug by my understanding.
You have at least following two options from what I see:
1. configure referrals and chaining so password locks etc... on the slave
get forwarded to the masters and replicated back to the slave.
This means that you need to configure lcPPolicyForwardUpdates: TRUE
and chaining on your slave.
2. configure multimaster replication so password locks get replicated
to your master.
You should close this ITS and we can discuss anything further on the
regular mailing lists.
Christian Kratzer CK Software GmbH
Email: email@example.com Wildberger Weg 24/2
Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden
Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart
Web: http://www.cksoft.de/ Geschaeftsfuehrer: Christian Kratzer