On 1/17/20 11:12 AM, Ondřej Kuzník wrote:
On Fri, Jan 17, 2020 at 11:07:01AM +0100, Ondřej Kuzník wrote:
> On Thu, Jan 16, 2020 at 04:08:28PM +0100, Michael Ströder wrote:
>> HI!
>>
>> I vaguely remember that it's possible that two slapd processes can
>> access a single MDB env.
>>
>> Is that supported?
>> Any pre-cautions needed?
>
> I think if you were to configure both of them as a syncrepl consumer,
> that might cause some headaches?
Also if either of them is a syncrepl provider, probably make sure that
no other server is accepting writes to this db file, I can imagine
(refreshAndPersist) scenarios that might leave you unhappy otherwise.
I guess you mean conflicts when generating entryCSN values? Good point.
The problem to be solved:
If a back-sock listener configured as overlay also needs access to some
LDAP entries then I have a loop in the frontend LDAP thread pool. This
possibly blocks. So my plan was to setup a shadow slapd and access the
database via this (separate LDAP thread pool).
In the simplest form there would only be read access. But OATH-LDAP's
HOTP validator would also need to update some attributes.
Ciao, Michael.