In an entry-balancing deployment, access control instructions (ACIs) are still configured in the backend Directory Server data. When defining access controls in an entry-balancing deployment, you need to ensure that the data used by the access control rule is available for evaluation on all datasets.
- Group 1 must exist in the
ou=groupsbranch of both datasets.
- The ACI referencing group 1 must exist in the
ou=peoplebranch or above. The
ou=peoplebranch entry itself is part of the common data.
The Directory Proxy Server ensures that any changes to entries within the scope of the entry-balancing request processor, but outside the balancing point, are applied to all backend server sets. Any ACI stored at the entry-balancing point will be kept in sync if changes are made through the Directory Proxy Server.