389-ds provides no mechanism for restoring an individual entry. Conceptually this seems like an easy task but in the context of replication it quickly gets difficult.
Restoring is done for one of two reasons, each of which has potentially a different method of restoration:
For a delete it is possible that the record can be restored from the tombstone (depending on how far back we're talking). It is unclear what additional work may be required to reconnect other data, such as group membership, automember and managed entries. Therefore one will need to be able to restore it from an LDIF as well.
For a modification the data needs to be restored via an LDAP mod so that it is replicated out without affecting the changelog.
The biggest hurdle, it seems, is in presenting the backed up data in a way that is reviewable by the user (and I'm not even talking easy, just ANY way).
Users may also want to only recover part of an entry. A description of a group, for example, but not the membership (ok, this is contrived).
Metadata Update from @rcritten: - Issue assigned to someone - Issue set to the milestone: Tickets Deferred
Login to comment on this ticket.