[Date Prev][Date Next]
Re: dsaOperation attributes, relax control and syncrepl
2012/5/31 Clément OUDOT <firstname.lastname@example.org>:
> 2012/5/30 Michael Ströder <email@example.com>:
>> Clément OUDOT wrote:
>>> an attribute declared 'dsaOperation' in the schema is not replicated
>>> with Syncrepl,
>> Is that really the general rule?
> It seems this is the rule in OpenLDAP code, see
>>> Today, I updated such attribute (pwdFailureTime) with the relax
>>> control and noticed the modification has been replicated.
>> Attribute type description for 'pwdFailureTime' has
>> USAGE directoryOperation and NO-USER-MODIFICATION attached
>> but not USAGE dSAOperation.
> Ok, bad example. I had the same problem with the attribute
> authtimestamp from lastbind overlay.
So I have another question: why is pwdFailureTime not replicated if it
is not a dsaOperation attribute? What is exactly the rule used by
syncrepl to know which operational attribute can be synchronized or
Thanks for your help,