Michael Ströder michael@stroeder.com schrieb am 08.03.2021 um 19:08 in
Nachricht 4f6e08fe-dfdd-57e1-9694-c7565f54ebd3@stroeder.com:
On 3/7/21 11:36 PM, A. Schulze wrote:
Am 02.03.21 um 13:19 schrieb A. Schulze:
I'm running a LDAP provider and multiple LDAP consumer and like to ask for your opinions to such a setup: While writing data to the LDAP provider, schema-checking is enforced. Currently also the LDAP consumer enforce schema checking.
Q: does it make sense to enforce schema checking on a LDAP consumer, too?
Put the question the other way: When would it make sense not to check the schema on the consumer when generally checking the schema? The situation that comes in my mind would be non-delta-syncrepl when the schma could be temporarily broken. I haven't seen such in the last years however.
would be helpful if you could share experience/suggestion/opinion
Personally I'm in the camp check-everything-everywhere and fail-soon-fail-hard. But that's a pretty general statement.
Maybe it's easier to answer if you explain which problem you want to solve?
Ciao, Michael.