[389-users] Re: multimaster replication -preventing clients writes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 01/22/2016 04:09 PM, German Parente wrote:

----- Original Message -----
From: "William Brown" <wibrown@xxxxxxxxxx>
To: "General discussion list for the 389 Directory server project." <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
Sent: Friday, January 22, 2016 4:28:57 AM
Subject:  Re: multimaster replication -preventing clients writes

On Thu, 2016-01-21 at 22:50 -0200, carne_de_passaro wrote:
Hi, I don't know if it will perform well but, you can create an ACI
on the
top of the tree and negate writes for all, except the master 2 IP.

The aci will replicate because this is MMR.

Yes, but it will be evaluated as false only in master 2.
So, master 2 will allow writes while in master 1, they will be forbidden.
the ip address in the ip aci rule defines and uses the client ip address, so it can control "from" where it is writable.

But I agree it could be nicer to have a read only replica.


Hi List,
I would like to know if there is a cfg option in a multimaster
replication
( 2 servers both accept read-writes) to prevent users/clients
application
writes to one of the master   without affecting the replication
agreements.
my env 389-ds 1.3.4.4
Thank you
Isabella
You are actually asking for a read only replica ... if a rw master
accepts no writes, it's a read only. If it accepts no writes it has
nothing to transmit back to the other master .... you want a read only
replica.


Otherwise, if you want rw masters, there is no reason to limit yourself
to writes only on one master. That's the point of the replication
protocol, to remove the point of failures in write targets.


--
Sincerely,

William Brown
Software Engineer
Red Hat, Brisbane


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux