Distributing and replicating Schema.

[Andres Tarallo <tarallo@ort.edu.uy>]

Hi!!!

We continue designing our LDAP solution. In order to improve reliability
we're thinking about using distributed LDAP replicas, and certain
services will hace access to certain replicas. We aim to be able to
replicate subsets of attributes and/or objects, as needed. This is
intended to avoid certain information to be leaked to certain servers.

We find that syncrepl could do the job, however it seems to us that it
could left some changes on hold (ie: password changes) until is
replicated. Password changes will be done against our main server, and
then it should be replicated to the "slave servers", so people could use
the changes.

On the other hand we find that slurp will do the job, replicating almost
instantly, but it replicates everyobject of the database.

Any comments will be appreciated.