Hi all,

 

I’m testing out setting up 2 read-only consumers (each matches 1 of 2 multi-masters).  Seems to be working fine, but I’m just trying to wrap my head around what’s happening when changes are made:

 

1.       Have 2 multi-master Directory Servers (1.2.9.9) setup and running

2.       Create another DS, set Replication to “dedicated consumer”

3.       Create a replication agreement from 1 of the multi-masters to this consumer

4.       Modify an entry from the consumer

5.       Change is made on the read-only server and on the multi-masters

 

There’s no replication agreement going FROM the consumer to the master, but I see changes on the master side anyways.  Is the consumer sending a request with the change to the master, who then makes the change and replicates it back to the consumer?

 

If the above is true, then how would I go about doing something like this:

 

The goal I’m trying to achieve is I want to put some read-only DS in an external zone.  In theory I don’t think the read-only’s should be able to modify the masters for security reasons (ie: if someone external compromises the external DS, they shouldn’t be able to delete all the entries in the internal).  However, having the option to allow certain changes from the external into internal may be useful (maybe allowing password changes from the read-only to the master or something).

 

Thanks,

Ryan


This communication, including any attached documentation, is intended only for the person or entity to which it is addressed, and may contain confidential, personal and/or privileged information. Any unauthorized disclosure, copying, or taking action on the contents is strictly prohibited. If you have received this message in error, please contact us immediately so we may correct our records. Please then delete or destroy the original transmission and any subsequent reply.