Sorry I can't be more help but I am listening! We use referential integrity but have not yet implemented it in multi-master mode nor have we really stressed and tested it - John On Mon, 2009-02-02 at 11:39 -0500, Tim Hartmann wrote: > I folks, > > Did anyone have any thoughts on this? If not, I think I'll just enable > it and start testing.... :) > > Tim > > > Tim Hartmann wrote: > > So After my trials and tribulations with " Referrals for Update > > Operations" (thanks again, you guys rock!) hence known as "Tim's > > continuing LDAP Saga and Viking Cha-Cha" > > > > I came across "Referential Integrity" in the docs, and boy howdy does it > > look useful! > > http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Creating_Directory_Entries-Maintaining_Referential_Integrity.html > > > > I had a couple of concerns, before I enabled it that I was hoping people > > could chime in on! > > > > > > 1) I'd like to have Referential Integrity monitor the memberUid field as > > well, but I was unclear in the documentation if when scanning the > > directory if it scans ALL the directories hosted by a given server, or > > just searches in the directory where the user was deleted? > > > > for example, I have two root suffixes, both of which contain users and > > groups , and more often then we'd like user "foo" exists in both... > > > > dc=example,dc=edu > > > > dc=dept,dc=example,dc=edu > > > > if I delete user uid=foo,ou=People,dc=dept,dc=example,dc=edu > > > > would the Referential Integrity plug in know to leave any instance of > > "uid=foo" and "memberUid=foo" in the dc=example,dc=edu branch alone? > > > > > > 2) I have 2 Masters (set up to be Multi Masters) and 4 Replica's, There > > are a number of warnings about setting this up only on 1 of the Masters > > (which shouldn't be a problem), in the case that M1 is configured with > > the Referential Integrity plug in, and it goes down for some amount of > > time, and a user is deleted, will the plugin "Catch up" once M1 has been > > brought back online? > > > > > > Thanks for the input! > > > > > > Tim > > > > > > > > > > > > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsullivan at opensourcedevel.com http://www.spiritualoutreach.com Making Christianity intelligible to secular society
