<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi, in the replication section you describe the behaviour when replicating to older versions of ds, but this is for n1, how about the new design ? Ludwig <div class="moz-cite-prefix">On 02/27/2014 04:46 PM, thierry bordaz wrote: </div> <blockquote cite="mid:530F5DC4.9050909@redhat.com" type="cite"> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> Hello, Thanks to all your feedbacks, they helped me a lot and raised a severe limitation in the original design. I updated the design following the aci syntax proposed during the discussion. On the implementation side, it is a bit more complex but less than I expected. I have not yet investigated the impact of ger operations. I think a big work will be the test side as the ACI syntax provides many options. <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation">http://port389.org/wiki/Access_control_on_trees_specified_in_MODDN_operation</a> Note: I kept for the moment the original design in 'alternative no1'. regards thierry <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Freeipa-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre> </blockquote> </body> </html>