Configuring DS Replication with DS Tools

Configuring Consumer

$ dsconf \
    -D "cn=Directory Manager" \
    ldap://consumer.example.com \
    backend \
    create \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    --be-name=ca

$ dsconf \
    -D "cn=Directory Manager" \
    ldap://consumer.example.com \
    replication \
    enable \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    --role=consumer \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-passwd=Secret.123

Configuring Supplier

$ dsconf \
    -D "cn=Directory Manager" \
    ldap://supplier.example.com \
    replication \
    enable \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    --role=supplier \
    --replica-id=1

$ dsconf \
    -D "cn=Directory Manager" \
    ldap://supplier.example.com \
    repl-agmt \
    create \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    --host=consumer.example.com \
    --port=636 \
    --conn-protocol=LDAPS \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-passwd=Secret.123 \
    --bind-method=SIMPLE \
    --init \
    example-agreement

$ dsconf \
    -D "cn=Directory Manager" \
    ldap://supplier.example.com \
    repl-agmt \
    init-status \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    example-agreement