Re: LDAP sync frontend in v4.0.x

Arran Cudbard-Bell wrote:

Fancied taking a break from refactoring in v4.0.x.

https://github.org/FreeRADIUS/freeradius-server/blob/v4.0.x/raddb/sites-avai... /ldap_sync

The idea is that you can "listen" on DNs within your LDAP directory.

You then use the updates you receive to create/invalidate cache entries, or send CoA/DM messages to reflect the changes that have occurred in LDAP.

Nifty feature. But please put a fat note into the comments that the syncrepl client will not see an entry getting deactivated if server-side ACLs make deactivated entries invisible to the syncrepl client. (That's the reason why I don't use syncrepl in Æ-DIR clients.) Ciao, Michael.