Directory server instance creation

To use a directory server instance in an LDAP environment, create an instance that is cryptographically synchronized with the existing instance to obtain optimum performance

If you create a directory server instance as a copy of an existing directory server instance, the two directory server instances are cryptographically synchronized. You do not require to synchronize them.

If you create an instance that is not a copy of an existing instance cryptographically synchronize the instance with the existing instance. You must cryptographically synchronize the server instances to obtain the best performance in the following environment:
  • Replication
  • Distributed directory
  • Import and export LDIF data between server instances

You must synchronize the server instances before you do any of the following operations:

  • Start the new server instance.
  • Run the idsbulkload command on the server instance.
  • Run the idsldif2db command on the server instance.

For more information about synchronizing directory servers, see Administering section of the IBM® Verify Directory documentation.

After you create a directory server instance and configure it with a DB2® database, back up the directory server instance. You must back up configuration, schema, DB2 database, and directory key stash files. You can use the idsdbback command to create directory server instance backup. You can use the idsdbrestore command to restore the key stash files if necessary. For more information about the backup and restore commands, see Command Reference.