From users-return-7757-archive-asf-public=cust-asf.ponee.io@directory.apache.org Mon Jan 29 20:56:11 2018 Return-Path: X-Original-To: archive-asf-public@eu.ponee.io Delivered-To: archive-asf-public@eu.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by mx-eu-01.ponee.io (Postfix) with ESMTP id A4846180654 for ; Mon, 29 Jan 2018 20:56:11 +0100 (CET) Received: by cust-asf.ponee.io (Postfix) id 93FC6160C2F; Mon, 29 Jan 2018 19:56:11 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id DD23F160C31 for ; Mon, 29 Jan 2018 20:56:10 +0100 (CET) Received: (qmail 54202 invoked by uid 500); 29 Jan 2018 19:56:05 -0000 Mailing-List: contact users-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@directory.apache.org Delivered-To: mailing list users@directory.apache.org Received: (qmail 53178 invoked by uid 99); 29 Jan 2018 19:56:04 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Jan 2018 19:56:04 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 12484CDDB5 for ; Mon, 29 Jan 2018 19:56:04 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.473 X-Spam-Level: * X-Spam-Status: No, score=1.473 tagged_above=-999 required=6.31 tests=[DKIM_ADSP_CUSTOM_MED=0.001, NML_ADSP_CUSTOM_MED=1.2, RCVD_IN_DNSWL_LOW=-0.7, SPF_SOFTFAIL=0.972] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id rzk7UNI8Aaff for ; Mon, 29 Jan 2018 19:56:03 +0000 (UTC) Received: from zmcc-5-mx.zmailcloud.com (zmcc-5-mx.zmailcloud.com [52.201.171.122]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTPS id 161A960D56 for ; Mon, 29 Jan 2018 19:56:02 +0000 (UTC) Received: from zmcc-5-mta-1.zmailcloud.com (zmcc-5-mta-1.zmailcloud.com [104.197.37.127]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by zmcc-5-mx.zmailcloud.com (Postfix) with ESMTPS id 95CCB40502 for ; Mon, 29 Jan 2018 14:02:07 -0600 (CST) Received: from zmcc-5-mta-1.zmailcloud.com (localhost [127.0.0.1]) by zmcc-5-mta-1.zmailcloud.com (Postfix) with ESMTPS id 92108C23CB for ; Mon, 29 Jan 2018 13:56:01 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by zmcc-5-mta-1.zmailcloud.com (Postfix) with ESMTP id 842D6C23C3 for ; Mon, 29 Jan 2018 13:56:01 -0600 (CST) X-Virus-Scanned: amavisd-new at zmcc-5-mta-1.zmailcloud.com Received: from zmcc-5-mta-1.zmailcloud.com ([127.0.0.1]) by localhost (zmcc-5-mta-1.zmailcloud.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id VH5dzYSy_s_e for ; Mon, 29 Jan 2018 13:56:01 -0600 (CST) Received: from macbook-pro.home (LFbn-1-4161-222.w92-169.abo.wanadoo.fr [92.169.156.222]) by zmcc-5-mta-1.zmailcloud.com (Postfix) with ESMTPSA id 316EDC212D for ; Mon, 29 Jan 2018 13:56:01 -0600 (CST) Subject: Re: Replication with StartTLS possible ? To: users@directory.apache.org References: From: =?UTF-8?Q?Emmanuel_L=c3=a9charny?= Message-ID: <59fc37f5-2d09-f258-9b29-3bb322b8db2a@gmail.com> Date: Mon, 29 Jan 2018 20:56:00 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: fr Content-Transfer-Encoding: quoted-printable Le 29/01/2018 =C3=A0 02:26, Fr=C3=A9d=C3=A9ric Alix a =C3=A9crit=C2=A0: > Hi everybody, >=20 > I would like to know if it is possible to replicate master =3D> slave w= ith > StartTLS yes, it is. > Is it possible and if yes, how can I do it please ? Actually, this is the default configuration :-) Otherwise, you just need to set the ads-replUseTls configuration parameter to TRUE. >=20 > A last question. If you can replicate partitions under StartTLS, do you > think it is a good idea to replicate without VPN under two cloud > providers ? Ceinture et bretelles, as we say in France ;-) More seriously, the performance impact should not be that huge in using a VPN anyway, and you will control the network, which is always a good id= ea. --=20 Emmanuel Lecharny Symas.com directory.apache.org