LDAP Replication
slurpd watches for changes, pushes to
replicas
Acts as LDAP client, and thus needs
Kerberos ticket, not keytab
Need cronjob to keep ticket current
Replicas must have ACLs which allow
modification by whatever principal slurpd is
configured to use