[Date Prev][Date Next]
Re: partial replication?
Pierangelo Masarati wrote:
In OpenLDAP 2.2 syncrepl filtering support is unreliable, it will not
correctly issue Delete requests for entries whose values have dropped
out of the filter. This feature only works correctly in 2.3/HEAD.
Aleksandar Milivojevic wrote:
Is it possible to replicate only some objects under a branch of
directory tree based on a filter?See the "filter" parameter to syncrepl in Admin Guide
For example, let assume I have "ou=people,dc=foobar,dc=com" with some
users under it. I would like to replicate only objects under this DN
that have attributes "(&(someAttr=TRUE)(anotherAttr=foobar))" to
slave LDAP server (for example, I want only some entries to be
visible on slave server for security reasons). Basically, this would
be like defining a filter for replication.
Of course, when attributes used by filter change (from example
someAttr or anotherAttr change value in the above example),
replication process would need to add/remove the entry to/from slave
Solution with putting users into separate subtrees wouldn't really be
the best solution for me, since I'd need to make several subtrees for
several slave servers. So, using subtrees, I would end up with
multiple entries for same user in various subtrees, instead of having
single entry for each user.
Is something like this possible? If not possible in current version
of OpenLDAP, it could be a usefull feature for some future version ;-)
-- Howard Chu
Chief Architect, Symas Corp. Director, Highland Sun
Symas: Premier OpenSource Development and Support