[389-users] Referential Integrity

[William]

> > So in the case of having RI on two ldap servers, you would set this to
> > off, since the server that handled the delete will replicate the other
> > updates soon after. In the case of RI on a single server, when the
> > non-RI server issues a delete, the RI enabled server would be triggered
> > to run the RI checks. Is that correct?
> Correct, but the RI enabled server needs to have 
> nsslapd-pluginAllowReplUpdates set to "on" if there are any other 
> master/supplier replication servers that do not have RI plugin enabled.
> 

Thanks for making sure I was clear on this.

> >
> > Given that you seem to be quite familiar with the refint code, can you
> > comment on the ability to run two masters with both having the plugin
> > enabled?
> This is the preferred way, and requires no "special" configuration 
> steps.  Ideally all the servers in a replicated deployment should have 
> the same plugin configurations.  It's when server configurations are not 
> the same that you can run into issues(e.g. needing to set 
> nsslapd-pluginAllowReplUpdates to "on", etc).
> >

Interesting. All the Redhat 389 documentation states that you should NOT
enable this on multiple masters. Is this recommendation in the
documentation something that should be reviewed?


-- 
William <william at firstyear.id.au>