2012/5/31 Clément OUDOT clem.oudot@gmail.com:
2012/5/30 Michael Ströder michael@stroeder.com:
Clément OUDOT wrote:
an attribute declared 'dsaOperation' in the schema is not replicated with Syncrepl,
Is that really the general rule?
It seems this is the rule in OpenLDAP code, see http://www.openldap.org/lists/openldap-bugs/200712/msg00078.html
Today, I updated such attribute (pwdFailureTime) with the relax control and noticed the modification has been replicated.
Attribute type description for 'pwdFailureTime' has USAGE directoryOperation and NO-USER-MODIFICATION attached but not USAGE dSAOperation.
Ok, bad example. I had the same problem with the attribute authtimestamp from lastbind overlay.
So I have another question: why is pwdFailureTime not replicated if it is not a dsaOperation attribute? What is exactly the rule used by syncrepl to know which operational attribute can be synchronized or not?
Thanks for your help,
Clément.