Using Replication With Other Directory Features; Replication And Access Control; Replication And Directory Server Plug-Ins - Netscape DIRECTORY SERVER 7.0 - DEPLOYMENT Deployment Manual

Your replication strategy follows:
• Choose a single server in one of the two buildings to contain a master copy of
your directory data.
This server should be placed in the building that contains the largest number of
people responsible for the master copy of the directory data. Call this Building
A.
• Replicate at least once within Building A for high availability of directory data.
Use a multi-master replication configuration if you need to ensure
write-failover.
• Create two replicas in the second building (Building B).
• If there is no need for close consistency between the supplier and consumer
server, schedule replication so that it occurs only during off peak hours.

Using Replication with Other Directory Features

Replication interacts with other Directory Server features to provide advanced
replication features. The following sections describe feature interactions to help
you better design your replication strategy.

Replication and Access Control

The directory stores ACIs as attributes of entries. This means that the ACI is
replicated along with other directory content. This is important because Directory
Server evaluates ACIs locally.
For more information about designing access control for your directory, refer to
chapter 7, "Designing a Secure Directory," on page 133.

Replication and Directory Server Plug-ins

You can use replication with most of the plug-ins delivered with Directory Server.
There are some exceptions and limitations in the case of multi-master replication
with the following plug-ins:
• Attribute Uniqueness Plug-in
Using Replication with Other Directory Features
Chapter 6 Designing the Replication Process 129