If directory servers in a replicated environment are out of synch, the replication queues
might get blocked. To resolve this problem, you must resynchronize your replicated
environment.
About this task
Consider a scenario where M1 is the master server with the most recent updated data. R1 and R2
are the two replica servers of the master server, M1. To resynchronize the directory servers,
complete the following steps.
Procedure
- Take R1 and R2 offline by stopping the R1 and R2 servers.
- Quiesce M1 for all queues.
- Clear the queues on M1 to R1 and M1 to R2. Repeat this process for all the queues. Using
the Web Administration Tool, click Manage queues under
the Replication management category in the navigation area. On the Manage queues wizard, click
Queue details. On the Queue details panel, click Pending
changes and then click Skip All Blocking Entries.
- Export the data of M1 to a file. Issue the following command:
idsdb2ldif -o /tmp/M1.ldif
- Unquiesce the M1 server.
- Unconfigure and drop the database on R1 and R2. Make sure that you answer yes to remove
the database. Issue the command of the following format:
idsucfgdb -I instance_name -r
- Configure the database on R1 and R2. Issue the command of the following format:
idscfgdb -I instance_name -a dbadminDN -w dbadminPW -t databasename \
-l dblocation -n
- Synchronize the modified schema. Copy the V3.modifiedschema from M1
over to R1 and R2. The modified schema, V3.modifiedschema, is in the
instance_home/idsslapd-instance_name/etc
directory.
- Synchronize the ibmslapddir.ksf file. To know more about
Synchronizing two-way cryptography between server instances, see the Administering section in the IBM® Verify Directory documentation.
Note: Only if the master and the replicas are on the same hardware and operating system, the
ibmslapddir.ksf file can be copied over from master to replicas. The
ibmslapddir.ksf file is in the
instance_home/idsslapd-instance_name/etc
directory.
- Copy the M1.ldif file to replicas and load the data of M1 onto R1
and R2. Issue the following command:
idsldif2db -i /tmp/Master.ldif -r no
- Start the R1 and R2 servers.
Results
Note: On Windows™ platform, change the paths
accordingly.
Alternatively, you can use the
ldapdiff or
idsideploy utility to synchronize between a master and replica server, depending
on your
IBM Verify Directory environment. The
ldapdiff utility identifies differences in a replica server and its master, and
can be used to synchronize replicas. The
idsideploy utility with the
-r and
-Lm options can be used to synchronize a peer-peer
or peer-replica servers. User can create the target instance either as a peer or replica of the
master server with the
-r option. The
-L option provides
the restore location from which the source instance's backed up database can be restored on to the
target instance (peer or replica). To know more about the
ldapdiff or
idsideploy utility, see the
Command Reference section in the
IBM Verify Directory documentation.