Configuring DS Replication with PKI Tools

Overview

This page describes the process to configure bi-directional replication between two DS instances using PKI tools.

Prerequisites

• Install primary DS

• Import data into primary DS

• Install secondary DS

Preparing DS Backend

Enabling Replication (Not Yet Implemented)

Creating Replication Agreements (Not Yet Implemented)

To create replication agreement on the primary DS:

$ pki-server ca-db-repl-agmt-add \
    --url ldap://secondaryds.example.com:3389 \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-password=Secret.123 \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    primaryds-to-secondaryds

To create replication agreement on the secondary DS:

$ pki-server ca-db-repl-agmt-add \
    --url ldap://primaryds.example.com:3389 \
    --bind-dn="cn=Replication Manager,cn=config" \
    --bind-password=Secret.123 \
    --suffix=dc=ca,dc=pki,dc=example,dc=com \
    secondaryds-to-primaryds

Initializing Replication Agreement

To initialize the replication agreement on the primary DS:

$ pki-server ca-db-repl-agmt-init \
    --url ldap://primaryds.example.com:3389 \
    --bind-dn "cn=Directory Manager" \
    --bind-password Secret.123 \
    --suffix dc=ca,dc=pki,dc=example,dc=com \
    primaryds-to-secondaryds

Available: Since PKI 11.5