I have read the document:

Howto:ChainOnUpdate - Fedora Directory Server

and have been unable to get it to work. When I attempt a write to the consumer it makes the change on the
consumer and does not update the master. With the next change on the master of any kind,
the mapping tree entry for this suffix changes from "nsslapd-state: backend" to "nsslapd-state: referral on update".
Once this state changes, my client complains that it cannot update, since it cannot follow referrals.

In addition, there are no log entries on the master to indicate any activity back from the consumer to the master, i.e.
a proxy login.