Chapter 8. Managing Replication
276
nsds5ReplicaPurgeDelay: 604800
nsds5ReplicaBindDN: cn=replication manager,cn=config
nsds5flags: 1
This entry identifies the database and suffix as participating in replication and sets what kind of
replica the database is. There are five key attributes:
•
nsds5replicaroot
sets the subtree (suffix) which is being replicated.
•
nsds5replicatype
sets what kind of replica this database is. For a hub, this value must be
2
.
•
nsds5ReplicaPurgeDelay
sets how long an entry holds its status information or how long a
tombstone entry is kept before deleting the information. The default value is
604800
(one
week).
•
nsds5ReplicaBindDN
give the DN as which the supplier will bind to the hub to make changes.
•
nsds5flags
sets whether the replica writes to the changelog. For a hub, this value must be
1
.
The replica entry attributes are described in
Table 8.2, “Replica Attributes”
. These attributes are
described in more detail in the
Directory Server Configuration, Command, and File Reference
.
8.7.4. Configuring Replication Agreements from the Command Line
When setting up replication agreements, first set them up between all suppliers, then between the
suppliers and the hubs, and last between the hub and the consumers.
The replication agreement has to define seven things:
• The consumer host (
nsds5replicahost
) and port (
nsds5replicaport
).
• The DN for the supplier to use to bind with the consumer (
nsds5ReplicaBindDN
), the
way that the supplier binds (
nsds5replicabindmethod
), and any credentials required
(
nsds5replicabindcredentials
).
• The subtree being replicated (
nsds5replicaroot
).
• The replication schedule (
nsds5replicaupdateschedule
).
• Any attributes which will
not
be replicated (
nsds5replicatedattributelist
).
Use
ldapmodify
to add a replication agreement to every supplier for every consumer which it will
updated. For example:
dn: cn=ExampleAgreement,cn=replica,cn="dc=example,dc=com",cn=mapping tree,cn=config
changetype: add
objectclass: top
objectclass: nsds5replicationagreement
cn: ExampleAgreement
nsds5replicahost: consumer1
nsds5replicaport: 389
nsds5ReplicaBindDN: cn=replication manager
nsds5replicabindmethod: SIMPLE
nsds5replicaroot: dc=example,dc=com
description: agreement between supplier1 and consumer1
nsds5replicaupdateschedule: 0000-0500 1
nsds5replicatedattributelist: (objectclass=*) $ EXCLUDE authorityRevocationList
nsds5replicacredentials: secret
Содержание DIRECTORY SERVER 8.0
Страница 18: ...xviii ...
Страница 29: ...Configuring the Directory Manager 11 6 Enter the new password and confirm it 7 Click Save ...
Страница 30: ...12 ...
Страница 112: ...94 ...
Страница 128: ...110 ...
Страница 190: ...Chapter 6 Managing Access Control 172 4 Click New to open the Access Control Editor ...
Страница 224: ...206 ...
Страница 324: ...306 ...
Страница 334: ...316 ...
Страница 358: ...340 ...
Страница 410: ...392 ...
Страница 420: ...402 ...
Страница 444: ...426 ...
Страница 454: ...436 ...
Страница 464: ...446 ...
Страница 484: ...466 ...
Страница 512: ...494 ...
Страница 522: ...504 ...