[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
replicate cn=config with exception of "ACLs"
- To: openldap-technical@openldap.org
- Subject: replicate cn=config with exception of "ACLs"
- From: Stanislav Kopp <staskopp@gmail.com>
- Date: Tue, 29 Nov 2016 12:38:55 +0100
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to; bh=Gi4iyWCgmtkAc8UlqXHoRzOVDqdG16S130iUhYc8nWI=; b=fBC+hI4a8BHrtJM3clmd65PinDGAg94fvIN7rZYkvcWlOOzejHWu+T3M8qk4M7k6n/ iOxsbUvCUaFyjOpoVoob+q9n7QHAdekqijNU+PAn5b/MIceCyau/5vkHuMFQviBC7CUV iQnxm8vz+Pg0q53Zg3GKOV+z0WlAkZhBovAfLPdv+FgWf2616OXDFUysRJx8a2M+Ju1n wnvIodyXZnp9zrSpjx6MPNsFSUiH6ut2E1YGqXIdWnxAdz5hlaOZPOyvRAazt/eFO0l2 Pe8sNn3lYJhOlYIhOgFt/Mexdsj9SuWkoXq1OaA9q70FqwiivbqbV2VcjXNah4wRID39 4DFQ==
Hello,
at the moment we're using master<->slave setup with slapd 2.4.31 using
old slapd.conf. I want to migrate all to "cn=config" and if possible
replicate cn=config DB to slaves for sake maintenance simplicity, but
with exception ofr ACLs rules, because master and slaves have
different ACLs.
Is it possible, or ist it a good idea in general?
The plus of slapd.conf was that I can deploy the same ACL file on all
slaves with some automation (e.g. puppet).
Thanks,
Stan