From: Pierangelo Masarati Date: Thu, 4 Sep 2008 00:58:37 +0000 (+0000) Subject: mention schema requirements of proxy cache (ITS#5680) X-Git-Tag: ACLCHECK_0~1389 X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=da0973b0162832e82c723e9c91c0ff803d75d897;p=openldap mention schema requirements of proxy cache (ITS#5680) --- diff --git a/doc/man/man5/slapo-pcache.5 b/doc/man/man5/slapo-pcache.5 index 84e55d2acc..eb2b0f5aa5 100644 --- a/doc/man/man5/slapo-pcache.5 +++ b/doc/man/man5/slapo-pcache.5 @@ -182,6 +182,13 @@ The remote server should expose the attribute because the underlying database that actually caches the entries may need it for optimal local processing of the queries. +The proxy server should contain all the schema information required for caching. +Significantly, it needs the schema of attributes used in the query templates. +If the objectClass attribute is used in a query template, it needs the definition +of the objectClasses of the entries it is supposed to cache. +It is the responsibility of the proxy administrator to keep the proxy schema +lined up with that of the proxied server. + Another potential (and subtle) inconsistency may occur when data is retrieved with different identities and specific per-identity access control is enforced by the remote server.