Re: Architecure Draft [Dont Use Copy]

[John Merrells <merrells@xxxxxxxxxxxx>]

Alan Lloyd wrote:

> John - thanks for that - but this response has major problems. Say we
> awant autrhenticated access to 8 servers and by definition with LDAP
> servers we have to replicate everything to every where that is there is
> about 50+ replication agreements ie. 7*8.. etc you can work this out.
> This means that a client must know which part of the tree lives in what
> server that is the master - so in this LDAP client we do.....
> I want the master entry - and from scanning all the LDAP severs I know
> about (because of hand configuration, I then scan them for their master
> context and then get the entry i desire...
>
> Its this whole hand-cranked multi-ldap actions that make it so bad its
> unworkable.
>
> LDAP severs and what they do,  will get worse and worse - with the more
> you add.

We're limiting ourselves here to just talking about the replication of a
single Naming Context.  We're specifically not addressing how servers
host different parts of the DIT spread amongst many servers.  It so
happens that our replication management entries provide a description
of where and what information is located where.  A client could use
this information to seek out the Primary Replica....

Or, another draft could define a control to encourage the server to do
this work on its behalf.  It could either generate a referral to the
Primary, or perform the operation on the clients behalf... but that would
probably be unworkable ;-)

John