Hi all,
I'm testing out setting up 2 read-only consumers (each matches 1 of 2 multi-masters).
Seems to be working fine, but I'm just trying to wrap my head around what's
happening when changes are made:
1. Have 2 multi-master Directory Servers (1.2.9.9) setup and running
2. Create another DS, set Replication to "dedicated consumer"
3. Create a replication agreement from 1 of the multi-masters to this consumer
4. Modify an entry from the consumer
5. Change is made on the read-only server and on the multi-masters
There's no replication agreement going FROM the consumer to the master, but I see
changes on the master side anyways. Is the consumer sending a request with the change to
the master, who then makes the change and replicates it back to the consumer?
If the above is true, then how would I go about doing something like this:
The goal I'm trying to achieve is I want to put some read-only DS in an external zone.
In theory I don't think the read-only's should be able to modify the masters for
security reasons (ie: if someone external compromises the external DS, they shouldn't
be able to delete all the entries in the internal). However, having the option to allow
certain changes from the external into internal may be useful (maybe allowing password
changes from the read-only to the master or something).
Thanks,
Ryan
________________________________
This communication, including any attached documentation, is intended only for the person
or entity to which it is addressed, and may contain confidential, personal and/or
privileged information. Any unauthorized disclosure, copying, or taking action on the
contents is strictly prohibited. If you have received this message in error, please
contact us immediately so we may correct our records. Please then delete or destroy the
original transmission and any subsequent reply.
Show replies by date