Skip to content

Configuring DS Replication with DS Tools

Endi S. Dewata edited this page Jul 22, 2023 · 15 revisions

Overview

This page describes the process to configure multi-supplier DS replication.

Configuring Replication

To configure replication on server1:

$ dsconf \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    ldap://server1.example.com \
    replication enable \
    --suffix=dc=example,dc=com \
    --role=supplier \
    --replica-id=1 \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-passwd=Secret.123

To configure replication on server2:

$ dsconf \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    ldap://server2.example.com \
    replication enable \
    --suffix=dc=example,dc=com \
    --role=supplier \
    --replica-id=2 \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-passwd=Secret.123

Starting Replication

To start replication from server1 to server2:

$ dsconf \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    ldap://server1.example.com \
    repl-agmt create \
    --suffix=dc=example,dc=com \
    --host=server2.example.com \
    --port=389 \
    --conn-protocol=LDAP \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-passwd=Secret.123 \
    --bind-method=SIMPLE \
    --init \
    example-agreement-server1-to-server2

To check the initialization status:

$ dsconf \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    ldap://server1.example.com \
    repl-agmt init-status \
    --suffix=dc=example,dc=com \
    example-agreement-server1-to-server2

To start replication from server2 to server1:

$ dsconf \
    -D "cn=Directory Manager" \
    -w Secret.123 \
    ldap://server2.example.com \
    repl-agmt create \
    --suffix=dc=example,dc=com \
    --host=server1.example.com \
    --port=389 \
    --conn-protocol=LDAP \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-passwd=Secret.123 \
    --bind-method=SIMPLE \
    example-agreement-server2-to-server1

Replication over SSL

To replicate over SSL, enable SSL connection on each DS server, then use the LDAPS protocol and port:

$ dsconf \
    ...
    repl-agmt create \
    ...
    --port=636 \
    --conn-protocol=LDAPS \

See Also