idsldapreplcfg

Edit online

Use the idsldapreplcfg configuration tool to configure various replication topologies for the Directory Server. This tool simplifies the process of setting up replication and reduces errors that might occur when you set up replication by using the graphical user interface or the ldif file.

Description

The idsldapreplcfg tool supports configuration of replication topologies with "simple bind" and "simple bind over SSL" between the supplier and consumer. You cannot use the tool for configuring replication over SSL by using certificate-based authentication.

Synopsis

idsldapreplcfg [ [-C charset] [-d level] [-e] [-s] [-v] [-Z] [-? | -help] ]
      -topo topologyName [topology-specific options]

Options

-C charset
Specifies the character set name as registered with IANA (Internet Assigned Numbers Authority), which you want to use.
-d level
Sets the specified debugging level in the LDAP library.
-e
Displays the LDAP library version information and exits.
-s
Specifies the DN of suffix or subtree entry that you want to configure as the replication context.
-v
Shows verbose output.
-Z
Specifies to use a secure LDAP connection by using Secure Sockets Layer (SSL) and Transport Layer Security (TLS). The -Z option is only supported for SSL component entry, and only when GSKit is installed.
-? | -help
Shows the usage.
-topotopologyName

Specifies one of the following replication topologies that you want to set up:

PP
Sets up a peer-to-peer replication topology.

Topology-Specific Options 

-topo PP -h1 peer1 -h2 peer2 -p1 port1 -p2 port2 -D1 binddn1 -D2 binddn2 -w1 passwd1 -w2 passwd2
           -K1 keyfile1 -K2 keyfile2 -P1 kpasswd1 -P2 kpasswd2 -N1 keyname1 -N2 keyname2 -RB replBindDN -RP replBindPW

where,
  peer1             hostname or ipaddress of peer1
  peer2             hostname or ipaddress of peer2
  port1             port at which peer1 is listening
  port2             port at which peer2 is listening
  binddn1           admin DN of peer1
  binddn2           admin DN of peer2
  passwd1           admin password of peer1
  passwd2           admin password of peer2
  keyfile1          keyfile to use to connect to peer1
  keyfile2          keyfile to use to connect to peer2
  kpasswd1          keyfile password for keyfile1
  kpasswd2          keyfile password for keyfile2
  keyname1          key label to use from keyfile1
  keyname2          key label to use from keyfile2
  replBindDN        Bind DN to be used during replication
  replBindPW        Bind PW to be used during replication

MR
Sets up a master-replica replication topology.

Topology-Specific Options

-topo MR -h1 master -h2 replica -p1 port1 -p2 port2 -D1 binddn1 -D2 binddn2 -w1 passwd1 -w2 passwd2
           -K1 keyfile1 -K2 keyfile2 -P1 kpasswd1 -P2 kpasswd2 -N1 keyname1 -N2 keyname2 -RB replBindDN -RP replBindPW

where,
  master            hostname or ipaddress of master
  replica           hostname or ipaddress of replica
  port1             port at which master is listening
  port2             port at which replica is listening
  binddn1           admin DN of master
  binddn2           admin DN of replica
  passwd1           admin password of master
  passwd2           admin password of replica
  keyfile1          keyfile to use to connect to master
  keyfile2          keyfile to use to connect to replica
  kpasswd1          keyfile password for keyfile1
  kpasswd2          keyfile password for keyfile2
  keyname1          key label to use from keyfile1
  keyname2          key label to use from keyfile2
  replBindDN        Bind DN to be used during replication
  replBindPW        Bind PW to be used during replication

MFR
Sets up a master-forwarding-replica replication topology.

Topology-Specific Options

-topo MFR -h1 master -hf forwarder -h2 replica -p1 portm -pf portf -p2 portr -D1 binddnm -Df binddnf -D2 binddnr 
          -w1 passwdm -wf passwdf -w2 passwdr -K1 keyfilem -Kf keyfilef -K2 keyfiler -P1 kpasswdm -Pf kpasswdf -P2 kpasswdr
          -N1 keynamem -Nf keynamef -N2 keynamer -RB replBindDN -RP replBindPW

where,
  master            hostname or ipaddress of master
  forwarder         hostname or ipaddress of forwarder
  replica           hostname or ipaddress of replica
  portm             port at which master is listening
  portf             port at which forwarder is listening
  portr             port at which replica is listening
  binddnm           admin DN of master
  binddnf           admin DN of forwarder
  binddnr           admin DN of replica
  passwdm           admin password of master
  passwdf           admin password of forwarder
  passwdr           admin password of replica
  keyfilem          keyfile to use to connect to master
  keyfilef          keyfile to use to connect to forwarder
  keyfiler          keyfile to use to connect to replica
  kpasswdm          keyfile password for keyfilem
  kpasswdf          keyfile password for keyfilef
  kpasswdr          keyfile password for keyfiler
  keynamem          key label to use from keyfilem
  keynamef          key label to use from keyfilef
  keynamer          key label to use from keyfiler
  replBindDN        Bind DN to be used during replication
  replBindPW        Bind PW to be used during replication

GG
Sets up a gateway replication topology.

Topology-Specific Options

-topo GG -h1 gateway1 -h2 gateway2 -p1 port1 -p2 port2 -D1 binddn1 -D2 binddn2 -w1 passwd1 -w2 passwd2
           -K1 keyfile1 -K2 keyfile2 -P1 kpasswd1 -P2 kpasswd2 -N1 keyname1 -N2 keyname2 -RB replBindDN -RP replBindPW

where,
  gateway1          hostname or ipaddress of gateway1
  gateway2          hostname or ipaddress of gateway2
  port1             port at which gateway1 is listening
  port2             port at which gateway2 is listening
  binddn1           admin DN of gateway1
  binddn2           admin DN of gateway2
  passwd1           admin password of gateway1
  passwd2           admin password of gateway2
  keyfile1          keyfile to use to connect to gateway1
  keyfile2          keyfile to use to connect to gateway2
  kpasswd1          keyfile password for keyfile1
  kpasswd2          keyfile password for keyfile2
  keyname1          key label to use from keyfile1
  keyname2          key label to use from keyfile2
  replBindDN        Bind DN to be used during replication
  replBindPW        Bind PW to be used during replication

To get help for a specific topology name, enter the following command at the command line:
idsldapreplcfg -topo topologyName -help
To unconfigure the replication, you must delete all the replication topology entries in the following sequence:
  1. ibm-replicationAgreement entries
  2. ibm-replicaSubentry entries that correspond to other peer server IDs
  3. ibm-replicaSubentry entry that corresponds to its own server ID
  4. ibm-replicaGroup entry