Red Hat DIRECTORY SERVER 8.0, Руководство администратора

Страница: 289 / 552

Configuring Replication from the Command Line
271
NOTE
After creating a replication agreement, the connection type (SSL or non-SSL) cannot
be change because LDAP and LDAPS connections use different ports. To change the
connection type, re-create the replication agreement.
8.7. Configuring Replication from the Command Line
Replication can be configured on the command line by creating the appropriate replica and agreement
entries on the servers. The process follows the same order as setting up replication through the
Directory Server Console:
1. Create the supplier bind DN on every consumer, hub, and multi-master supplier (
Section 8.3,
“Creating the Supplier Bind DN Entry”
).
2. If the corresponding database and suffix do not exist on one of the replicas, create it
(
Section 3.1.1, “Creating Suffixes”
).
3. Configure the supplier replicas (
Section 8.7.1, “Configuring Suppliers from the Command Line”
).
4. Configure consumers (
Section 8.7.2, “Configuring Consumers from the Command Line”
).
5. Configure hubs for cascading replication (
Section 8.7.3, “Configuring Hubs from the Command
Line”
).
6. Create the replication agreements (
Section 8.7.4, “Configuring Replication Agreements from
the Command Line”
). For cascading replication, create the agreement between the supplier and
hub, then between the hub and consumers; for multi-master, create the agreements between all
suppliers, then between the suppliers and consumers.
7. Lastly, initialize all of the consumers (
Section 8.7.5, “Initializing Consumers Online from the
Command Line”
), if the consumers were not initialized when the replication agreement was
created.
8.7.1. Configuring Suppliers from the Command Line
There are two steps to setting up the supplier replica. First, the changelog must be enabled, which
allows the supplier to track changes to the Directory Server. Then, the supplier replica is created.
1. On the supplier server, use
ldapmodify
to create the changelog
1
entry.
ldapmodify -v -h supplier1.example.com -p 389 -D "cn=directory manager" -w password
dn: cn=changelog5,cn=config
changetype: add
objectclass: top
objectclass: extensibleObject
cn: changelog5
nsslapd-changelogdir: /var/lib/dirsrv/slapd-
instance_name /changelogdb
nsslapd-changelogmaxage: 10d
Example 8.2. Example Changelog Entry
There are two important attributes with the changelog.