Re: LDAP Replication

On 01/01/2010 12:12 PM, ml ml wrote:
> Hello List,
>
> i would like to store multiple firewall configuration information on a
> master ldap server, but i also want to make sure the firewall
> configuration is locally available, too.
>
> Now i have the problem of a "split brain" scenario if the replication
> does not work (if the internet connection is down).
>
> Here is a little ascii art: http://pastebin.com/m68de0f31
>
> How can i solve this? Can OpenLDAP "resume" and push the changes to
> the slave if its available again?

Hi,

In the general case, OpenLDAP replication (syncrepl) works as "pull" 
rather than "push". That is, the slave contacts the master to get any 
changes. A "push" scenario is possible if you really want it, but more 
complicated.

This system "resumes" after a slave being unavailable for a while, by 
updating all newly-changed entries in the slave when it contacts the 
master again.

If you haven't already, I suggest reading the chapter on replication 
from the OpenLDAP Admin Guide:
http://www.openldap.org/doc/admin24/replication.html

Good luck, all the best,
Jonathan