Netscape DIRECTORY SERVER 7.0 - DEPLOYMENT Deployment Manual

Also see for NETSCAPE DIRECTORY SERVER 7.0: Introduction manual Manual Installation guide Configuration guide Reference

Contents

Netscape DIRECTORY SERVER 7.0 - DEPLOYMENT Deployment Manual Manual pdf 129 page image

Using Replication with Other Directory FeaturesChapter 6 Designing the Replication Process 129Your replication strategy follows:• Choose a single server in one of the two buildings to contain a master copy ofyour directory data.This server should be placed in the building that contains the largest number ofpeople responsible for the master copy of the directory data. Call this BuildingA.• Replicate at least once within Building A for high availability of directory data.Use a multi-master replication configuration if you need to ensurewrite-failover.• Create two replicas in the second building (Building B).• If there is no need for close consistency between the supplier and consumerserver, schedule replication so that it occurs only during off peak hours.Using Replication with Other Directory FeaturesReplication interacts with other Directory Server features to provide advancedreplication features. The following sections describe feature interactions to helpyou better design your replication strategy.Replication and Access ControlThe directory stores ACIs as attributes of entries. This means that the ACI isreplicated along with other directory content. This is important because DirectoryServer evaluates ACIs locally.For more information about designing access control for your directory, refer tochapter 7, “Designing a Secure Directory,” on page 133.Replication and Directory Server Plug-insYou can use replication with most of the plug-ins delivered with Directory Server.There are some exceptions and limitations in the case of multi-master replicationwith the following plug-ins:• Attribute Uniqueness Plug-in