[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Replication of olcAccess
- To: Ulrich Windl <Ulrich.Windl@rz.uni-regensburg.de>, stefan@kania-online.de, openldap-technical@openldap.org, quanah@symas.com
- Subject: Re: Replication of olcAccess
- From: Michael Ströder <michael@stroeder.com>
- Date: Mon, 13 Jan 2020 12:02:03 +0100
- Autocrypt: addr=michael@stroeder.com; prefer-encrypt=mutual; keydata= mQENBFbdnRoBCADj0vYA4aRwKJ6AE4mf8oElLgMT/1eLNKpJ2FYBWcwj9d8dTk5/p9b8DRxy S/qQIUUZqt9xRFZwUCm0vFeQMRDeN9xzAKoRzrJifoDOacOjG1lhZTKYvVZGgUT89Ao3QeHh Q7gPzcAKNoueoR2y3FXStOYuRrbk5PlSjVAITjsotgc7PWE9mmVYpeu8a+byK/DBHKUyolOA 1UXYvDa7MbPhMtdNm8qnwtKs1Vsyk1VkErM+5cIe+zTT6WYQcmZMRjCtWGiFTzk9W6Mdlskk WRTKhKNgokTsgcy1ecaCBUZWxv/SyXgD81+rwRi9b8Px+1reg43ayxi8sV7jrI1feybbABEB AAG0J01pY2hhZWwgU3Ryw7ZkZXIgPG1pY2hhZWxAc3Ryb2VkZXIuY29tPokBNwQTAQgAIQUC Vt2dGgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRAH3HrjaovJOFpTCACjO773gcmJ KvzjiNpUFl/gANyaJgIq4VbMQ7VthRb1F9X6YbdJ6Z99ntyESjGFCpjofcSomr2vJDpv6ht+ lY33yo20YwsMpqe2OeId0jPybG+FtabKjgBNoAk7iqnBGUvE4t0dz0n1LQVCQR2jxyTKmcNq OYpsRZ3H+6kWwJMuVgsNZglINVZ8JgV5QuLYN5jhYz+pOuFnU11bV6nWREvzZXzebe7g7Zus 6AsWjtJ0lDvgBNzLlF3/eFrVch6Bejs0SvuFseIdZQk+4YU6Rb8xul/jDFXIfo7eTmijO3dV T5AmC1cUi8czncwpgAJnEH8vYv23RoN/aw2gSMCS2huIuQENBFbdnRoBCAC7L1cTVBVZZuM/ yxSUM5CsgGBlTD1Cr7C2ngZFsHSYXVLq6NUB8GZA2iLK96CrwnFw4/Jjz4llOjc50iVRMQKL RyFWOJAMrpPq2ew5T+Uoo524D//dwVbqkFVVuvM8NPiKIDyPGCjP+acM1D8hXwhOXgQ8Iz8Q 3/GRSYjitn9JrkF0ia2nhariznBKVu0LDffxF/hOCx45+QRR2/rYYlshfZMB7nEJX9P+hVfM CSzltz9Z8CldeUbiJvnyrISReR2XBw9oh8JkIUP0BtpIaify9A7EfzOk+W9BUnWe+YwdSUsB fJxOhSv+umyW5GMqZGFu+4oYnkzbe+1LUs1JarCtABEBAAGJAR8EGAEIAAkFAlbdnRoCGwwA CgkQB9x642qLyTjEUgf+JX6Atatl/QKe37yCj1OZYNPd3B0rPLJRF5mEmrADRXLZC9+uFeDS Wxxln040gnR6rjBHrRcvVmlTDiZY26iuL16+V+0/aZ9uyXNQSzk2cwDSiI/8gvr72Y+FN5fh cGXpeNHxHilYc9onzDhxyE76cwzqTKm4q2ULIH2u9IHQ5O86Fv6nHPYhe2fy1bhQapNwi/Xl 3G3i2WNH/w7m+1zWU1IddZOjmXzoxLT1BATwXGa0Tt5RjVb2mM1Wg3Zj6kqFkF2vvKcvrwj0 q0Ap5uyfN5m0uWzQMCMoaV9HQf7f5MkS1lnwBqDgnojjVAieX5uk7olUiRuPKHMfhvXulYP8 AA==
- Content-language: en-US
- In-reply-to: <5E1C4C24020000A1000363E2@gwsmtp.uni-regensburg.de>
- References: <37deaae8-4151-a84c-6707-b230a8cc838f@kania-online.de> <39EBBA7AE737BAD1753B2644@[192.168.1.144]> <d97c6004-bebe-5a10-1f0a-81c7a88c3137@kania-online.de> <4B0FD7E56603FFBE4C221DA8@[192.168.1.144]> <771d7e42-1e54-a783-92cb-e3ead597ad12@stroeder.com> <5E1C4C24020000A1000363E2@gwsmtp.uni-regensburg.de>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.3.1
On 1/13/20 11:53 AM, Ulrich Windl wrote:
>>>> Michael Ströder <michael@stroeder.com> schrieb am 07.01.2020 um 20:41 in
> Nachricht <771d7e42-1e54-a783-92cb-e3ead597ad12@stroeder.com>:
>> On 1/7/20 8:13 PM, Quanah Gibson-Mount wrote:
>>> The admin guide discusses how to replicate cn=config.
>>
>> Hmm, I vaguely remember that the conclusion on this list was that
>> replicating cn=config is currently not considered reliable enough.
>
> But it works "well enough" for many cases. I think: Let users try it, and let
> users decide whether it does the job.
Nobody and nothing prevents a user from trying anything and be happy
with that.
But "users" have to be well aware of what they can expect to be a stable
and supported configuration (after meeting prerequisites). So that they
don't complain and blame others later.
E.g. in case of replicating cn=config "users" have to understand the
strong dependency on stable IP addresses and or hostnames used for
replicas in LDAP URL part of the serverID. Which is not really obvious
to beginners.
Ciao, Michael.