Wuensche Michael wrote:
I have an Openldap environment with 2 servers, one serving as provider for 2 databases and one as consumer.
Technical questions specific for OpenLDAP should be directed to the openldap-technical mailing list (see http://www.openldap.org/lists/).
On one of the databases I only want to replicate certain entries, filtered by objectclass. I use syncrepl for replication.
This is possible by setting a filter in your syncrepl-statement. But you have to take care whether superior entries of replicated entries are also covered by your filter.
Now I would like to write entries, which are not covered by the filter and so are not replicated. But Openldap sends me a referral to the master on write attempts if I use the updateref directive. If I don't use this directive, I get error 53: unwilling to perform.
It seems you're writing to the consumer in a single-master environment where the consumer is read-only. Why not simply write to the provider?
Is there a way to have part of a databases entries to be replicated and others being allowed to write locally?
Why do you want that? Maybe you want to use something like slapo-translucent(5). Ciao, Michael.
smime.p7s
Description: S/MIME Cryptographic Signature
