Re: Possible workaround to slapo-ppolicy sync limitations

[Howard Chu <hyc@symas.com>]

Jordi Espasa Clofent wrote:
> Hi,
>
> This post is because of:
> http://www.openldap.org/lists/openldap-technical/200906/msg00221.html
> http://www.openldap.org/lists/openldap-technical/200908/msg00028.html
>
> So, if you're using ppolicy-slapo in a load-balanced environment,  you
> pool servers never will be sync completely; at least, the ppolicy state
> atributes will be not replicated. I know isn't really a slapo-ppolicy
> limitation rather than RFC especification consequence.

This is already fixed in 2.4.17 ppolicy. Read the slapo-ppolicy manpage, look 
at the Forward_Updates directive.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/