David Frickert

can also add it to `env`

> First of all thank you for your great contribution ! > > can you add a test in `.github/workflows/ci-others.yaml` to test that in read only mode you can read...

> I tried it and I found out that if you are using `olcReadOnly: TRUE` you are locking the base and the replication can't work. > Did you have the...

Sure, here: ``` dfrickert@VD011936:~$ sudo LDAPTLS_REQCERT=hard LDAPTLS_CACERT=/etc/ssl/certs/TestLDAP_CA.pem ldapsearch -x -H ldaps://127.0.0.1.sslip.io:636 -D 'cn=admin,dc=example,dc=com' -W -b "dc=example,dc=com" Enter LDAP Password: # extended LDIF # # LDAPv3 # base with scope subtree...

> openldap-readonly-0 openldap-stack-ha additional info: no objectClass attribute i had this issue as well, in `LDAP_EXTRA_SCHEMAS`, `readonly` needs to be the last one in this env var, which is what...

i will try to write a github test to see if it leads to your issue as well, but my values are as follows: ``` customAcls: |- dn: olcDatabase={2}mdb,cn=config changetype:...

Also, might or might not be relevant, I noticed that there is an issue on ACLs in cluster mode, so i do run: ``` kubectl exec -n {{ iam_namespace }}...

If you can give me permissions to run workflows ad-hoc that would be nice! @jp-gouin (not fully sure how that works)

> I tried it and I found out that if you are using `olcReadOnly: TRUE` you are locking the base and the replication can't work. Did you have the same...

okay, RO replica with ACL actually seems to work. But it seems it can't be fully read-only as the admin account still can write onto it. Also, if any ACLs...