Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 253 / 634

Encrypting Data In eDirectory 253
n
ov
do
cx (e
n)
11
Ju
ly 20
08
When you specify the replicaNumber of the replicas in the above syntax, you enable the encrypted
replication between those replicas. consider the following example syntaxes:
Š 1#0#1: Encrypted replication is enabled from and to replica number 1; to and from, every other
replica in the partition.
Š
0#3#1: Encrypted replication is disabled between replica numbers 3 and 1.
Š
0#1#1: Encrypted replication is disabled for replica number 1.
The following is a sample LDIF file that disables encrypted replication between replica numbers 1
and 3:
dn: o=ou
changetype: modify
replace: dsEncryptedReplicationConfig
dsEncryptedReplicationConfig: 0#3#1
Partition Operations
When you split a partition, the encrypted replication configuration in the parent partition is inherited
by the child partition. When you merge a partition, the encrypted replication configuration of the
parent partition is retained in the resultant partition.
10.2.2 Adding a New Replica to a Replica Ring
Adding new replica to a replica ring is affected by whether encrypted replication is enabled or
disabled for the partition at the partition and replica level.
For more information on adding a replica to a replica ring, refer to Section 5.5, “Administering
Replicas,” on page 137 .
At each of the above levels, you have different scenarios depending on which version of eDirectory
server you are trying to add to the replica ring, as explained in the following sections:
Š
“Enabling Encrypted Replication at the Partition Level” on page 253
Š
“Enabling Encrypted Replication at the Replica Level” on page 257
Enabling Encrypted Replication at the Partition Level
The scenarios vary depending on the version of eDirectory server you are trying to add. This section
contains the following information:
Š
“Adding Pre-eDirectory 8.8 Servers to the Replica Ring” on page 253
Š “Adding eDirectory 8.8 Servers to the Replica Ring” on page 255
Adding Pre-eDirectory 8.8 Servers to the Replica Ring
The following illustration gives you the possible scenarios when you add a pre-eDirectory 8.8 server
to the replica ring:
Š
Scenario A
Š
Scenario B
Š
Scenario C