we recently adjusted our sync from n-way multimaster replication of the tree (searchbase="dc=organization,dc=com") and now included our "cn=config" replication.

Some concerns/questions I have:

Before with only tree replication, it was my understanding that one could NOT add a new schema along with an object unless said schema already existed in the other masters. yes?

Our process was to turn off the sync add the schema to each master then normalize. Probably turning off the sync was unnecessary but just to be safe. Regardless if a new object with new schemas was added then one could ruin all the masters. Correct?

Ok, so now with cn=config synchronized as well. Does this issue, if an issue, go away?

Also, if upgrading one masters openldap software, should the sync be off? Recommendations?

Any input is much appreciated.

Thank you,

Dave