On 01/22/2016 04:09 PM, German Parente wrote:
----- Original Message -----
> From: "William Brown" <wibrown(a)redhat.com>
> To: "General discussion list for the 389 Directory server project."
> Sent: Friday, January 22, 2016 4:28:57 AM
> Subject: [389-users] Re: multimaster replication -preventing clients writes
> On Thu, 2016-01-21 at 22:50 -0200, carne_de_passaro wrote:
>> Hi, I don't know if it will perform well but, you can create an ACI
>> on the
>> top of the tree and negate writes for all, except the master 2 IP.
> The aci will replicate because this is MMR.
Yes, but it will be evaluated as false only in master 2.
So, master 2 will allow writes while in master 1, they will be forbidden.
address in the ip aci rule defines and uses the client ip
address, so it can control "from" where it is writable.
But I agree it could be nicer to have a read only replica.
>>> Hi List,
>>> I would like to know if there is a cfg option in a multimaster
>>> ( 2 servers both accept read-writes) to prevent users/clients
>>> writes to one of the master without affecting the replication
>>> my env 389-ds 22.214.171.124
>>> Thank you
> You are actually asking for a read only replica ... if a rw master
> accepts no writes, it's a read only. If it accepts no writes it has
> nothing to transmit back to the other master .... you want a read only
> Otherwise, if you want rw masters, there is no reason to limit yourself
> to writes only on one master. That's the point of the replication
> protocol, to remove the point of failures in write targets.
> William Brown
> Software Engineer
> Red Hat, Brisbane
> 389 users mailing list
389 users mailing list