Return-Path: Delivered-To: apmail-incubator-directory-dev-archive@www.apache.org Received: (qmail 7407 invoked from network); 24 Feb 2005 05:21:50 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 24 Feb 2005 05:21:50 -0000 Received: (qmail 83199 invoked by uid 500); 24 Feb 2005 05:21:50 -0000 Delivered-To: apmail-incubator-directory-dev-archive@incubator.apache.org Received: (qmail 83150 invoked by uid 500); 24 Feb 2005 05:21:50 -0000 Mailing-List: contact directory-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list directory-dev@incubator.apache.org Received: (qmail 83135 invoked by uid 99); 24 Feb 2005 05:21:50 -0000 X-ASF-Spam-Status: No, hits=-10.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: local policy) Received: from ss53.shared.server-system.net (HELO ss53.shared.server-system.net) (72.10.34.2) by apache.org (qpsmtpd/0.28) with ESMTP; Wed, 23 Feb 2005 21:21:48 -0800 Received: from [127.0.0.1] (68-175-98-78.nyc.rr.com [68.175.98.78]) (authenticated (0 bits)) by ss53.shared.server-system.net (8.11.6/8.11.6) with ESMTP id j1O5Ll113544 for ; Wed, 23 Feb 2005 21:21:47 -0800 Message-ID: <421D6458.8040904@toolazydogs.com> Date: Thu, 24 Feb 2005 00:21:28 -0500 From: "Alan D. Cabrera" User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Apache Directory Developers List Subject: Re: [replication] Master slave replication will not suffice References: <421D2AC2.8060001@bellsouth.net> In-Reply-To: <421D2AC2.8060001@bellsouth.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Alex Karasulu wrote: > > I was thinking about replication earlier today. I was hoping we can > quickly implement master slave replication by piggy backing on a JMS > implementation like ActiveMQ. It quickly occured to me however that > there is no way we can utilize a master slave rep. configuration > without loosing all the benefits of having embedded services like > Kerberos, DNS, DHCP etc. > > The reasoning behind this has to do with the way master-slave rep. > works. Basically there is one master and all other servers are slaves > a.k.a. replicas. A request to modify a replica returns an error > indicating the replica is not writable along with a referral to the > master. I forget the exact LDAP result code returned. The client > would then contact the master for the alteration what ever it may be. > The master makes the change and propagates it to the replicas usually > using a special replication user that bypasses certain checks. > > Here's the problem: with a master slave setup an embedded inet service > like Kerberos will have to contact the master of the system to make > alterations on all replicas for any alterations to the DIT! This > defeats the entire purpose of embedding the service in the first place > and limits the HA yeild from replication. > > So what we need is multimaster replication. This is an order of > magnitude more complex than master slave replication. Once you have replication what's the point in embedding? Regards, Alan