Re: ACL Question 'write stop' 'write break'

2009-10-19 Thread Aaron Richton
Please keep replies on the list. On Mon, 19 Oct 2009, Edward Capriolo wrote: [...cut...] As you have said .*managed people are never able to auth, one that rule is put in place. So If I understand you correctly I should do this: access to dn.regex="mail=.*.mana...@jointhegrid.com,ou=user,ou=jo

Re: ACL Question 'write stop' 'write break'

2009-10-19 Thread Aaron Richton
slapd -d acl (or the same through loglevel directives) is really helpful if you're not already using that... First off, "attr=" is not preferred, please see slapd.access man page. This should be logged at LDAP_DEBUG_ANY; are you reading your startup logs? You might as well do a "slaptest -d co

Re: ACL Question 'write stop' 'write break'

2009-10-19 Thread masarati
> I know this is somewhat of an RTFM question, but I did RTFM and I dont > understand > why how BREAK is interpreted. "stop" means do not process any more "access" rules "break" means do not process any more "by" clauses within this "access" rule; continue processing from next "access" rule. "st

MirrorMode and chaining - are slaves needed?

2009-10-19 Thread Ryan Steele
Hi folks, I'm in the process of setting up about six nodes, and tossing around the idea of having either 2 masters in MirrorMode (traffic to the "active" master is managed externally) with 4 slaves (each of whom will refer their writes to the active master). I'm automating some of the setup, an

Re: ACL Question 'write stop' 'write break'

2009-10-19 Thread Edward Capriolo
On Thu, Oct 15, 2009 at 11:22 AM, Edward Capriolo wrote: > Hello all, > > We are currently migrating from a master-slave, to a multi-master > setup. All went well except for the fact that the access on the old > master node was more liberal then the access on the slave node. As a > result some app