Hi,
On Tue, 8 Oct 2013, Michael Ströder wrote:
I don't want to keep you away from contributing this but you should be aware of two issues:
- You have much higher load because of the chaining to a provider and
subsequent replication to the consumers.
- If the provider is down slapo-ppolicy does *not* write any ppolicy
attributes at all.
I whipped up following patch and would like some review on it:
http://www.cksoft.de/paste/b4e3d7b2a77f330237ef518eb946d104c1999cda/slapo-la...
The patch introduces a new lastbind_forward_updates (olcLastBindForwardUpdates ) boolean parameter to slapo-lastbind that has the same semantics as ppolicy_forward_updates (olcPPolicyForwardUpdates) in slapo-ppolicy.
I adapted the code from slapo-ppolicy but was not sure of one line I marked with TODO in the patch.
I have a 2 master, 2 slave syncrepl test setup which chaining from the slaves to the masters ( to one of them to be precise ).
- Bind on master1 results in authTimestamp getting replicated to master2 and both slaves.
- Bind on slave1 with olcLastBindForwardUpdates=TRUE results in authTimestamp getting forwarded to the master with updateRef and chaining and replicated from there.
I have also patch the slapo-lastbind.5 manpage.
This of course needs a review before being used in production.
Disclaimers apply.
Greetings Christian