[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: resynchronizing partial replica after ACL change

Ferenc Wagner wrote:

I'm running a couple of partial replicas, where the replicated content
is narrowed by provider ACLs.  All is fine.  Now, I need to extend the
replicas with a new attribute, so I extend the ACL to allow reading of
this attribute as well.  How can I get the replicas synchronize this new
attribute without downtime?  Is forcing a full reload by slapd -c rid=1
a good solution?

That should work, for a standard provider/consumer replication.

Does that incur the slapd restart downtime only, or
would the replica database be in a crippled state until the full resync

No crippled state. Just inconsistent, since some entries will have the new attributes and others won't have updated yet.

  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/