/-----------------------------------\

| master1 <- mirror repl -> master2 |

\-----------------------------------/

     ^         ^               ^

     |         |               |

 syncrepl  syncrepl        syncrepl

     |         |               |

 /-------\ /-------\       /-------\

 |cache01| |cache02|  ...  |cache n|

 \-------/ \-------/       \-------/

The master servers are using mirror replication and are behind a load balancer 
setup for active/passive failover.  All writes go to the active master where 
the "member" attribute is maintained for the groups.  The cache servers get 
their data from the master servers using syncrepl replication.  All the end 
clients connect to the cache servers.

I need to be able to present the memberOf attribute on users on the cache 
servers.  The man page for slapo-memberof states that it is not compatible with 
syncrepl.  Because of this the cache servers are using slapo-dynlist to create 
the memberOf attribute.  The problem is since I am using a dynamic list I can 
not search using the memberOf attribute only query its value.  I need to be 
able to search by the memberOf attribute.

What is the recommended way generate the memberOf atribute?  Should I modify 
the schema for a user and somehow maintain the memberOf attribute on the 
masters?  I am a bit worried about this since looking at the slapo-memberOf 
source the memberOf attribute it is flagged as a DSAOperation.

Reply via email to