[Freeipa-users] compat plug-in and replication

[Dmitri Pal]

On 03/16/2012 03:55 PM, Stephen Ingram wrote:
> On Fri, Mar 16, 2012 at 12:12 PM, Rob Crittenden <rcritten at redhat.com> wrote:
>> Stephen Ingram wrote:
>>> I've seen mention about the compat plug-in causing issues with
>>> replication. In my 2.1.4 installation I notice that the plug-in is
>>> turned on by default. Is compat only required for those supporting NIS
>>> or does it serve another purpose. As I don't use NIS, I'm just
>>> wondering if it's safe to turn off.
>>
>> The compat plugin wasn't causing problems with replication but we did see
>> increasing memory and CPU usage during migration. We now recommend that
>> compat be disabled when migrating entries (who needs the overhead anyway).
> What do you mean exactly by migrating entries or migration in general?
> I'm getting the impression that this is something different than
> replication? If you disable compat, then those entries would not
> appear in the replica, no?

When you migrate from a DS you have to IPA you load data into IPA using
ipa migrate-ds command.
Some time it takes a while to process the whole DS data you might have.
During this time we recommend turning compat and NIS plugins off and
then when the migration is complete turning them on if you need them.

>> Yes, safe to turn it off depending on what your needs are. There are two
>> capabilities provided by the slapi-nis plugin:
>>
>> 1. Compatibility for older clients such as Solaris which doesn't fully grok
>> 2307bis and netgroup triples (ipa-compat-manage enable/disable)
>>
>> 2. An NIS listener (ipa-nis-manage enable/disable) which requires compat to
>> be enabled.
>>
>> But like I said, shouldn't impact replication at all. It just reformats
>> data.
> Could you please explain what you mean by reformatting the data? Are
> you talking about changing something in the directory?

NIS plugin is a flavor of compat plugin.
Compat plugin looks at the actual data in the LDAP and creates a view of
this data in another format in memory.
Via this capability you can create 2307 objects out of 2307bis object or
expected SUDO entries from the entries in the internal representation.

HTH
> Steve
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/