Adding replica entries in TDBM or LDBM

In TDBM or LDBM, replica entries can be placed anywhere within the directory tree, although it is suggested that a replica entry be a leaf entry. Placing replica entries in the directory tree then requires that any parent entries of the replica entry be added to the directory before adding the replica entry. These entries must be added to both the replicating server and replica server before addition of the replica entry. This is needed on the replica server because these entries are being added at the replicating server without replication being active. If a replica entry is not placed as a leaf node in the directory tree, the only entries allowed below the replica entry are other replica entries. The LDAP server allows non-replica entries to be placed below replica entries, however, these entries are not replicated to the replica servers.

The replica entry defines a replica for the backend containing the entry. Any changes made to the directory tree managed by that backend is replicated to each replica defined for that backend. The replica entry does not define replicas for other backends in the LDAP server, therefore, if changes to all LDBM and TDBM directory trees managed by the LDAP server are to be replicated, then each backend must contain the appropriate replica entries to define replication for that backend.

The following is an example of a replica entry definition using LDIF format.

dn: cn=myReplica,o=Your Company
objectclass: replicaObject
objectclass: extensibleObject
cn: myReplica
replicaHost: myMachine.ibm.com
replicaBindDn: cn=Master
replicaCredentials: secret
replicaPort: 400
replicaUseSSL: FALSE
description: Replica machine in the fourth floor lab
ibm-slapdLog: ro1.errlog
ibm-slapdReplMaxErrors: 5

Searching a replica entry

Most of the attributes in a replica entry are operational attributes. When searching a replica entry, the operational attributes are not included in the output unless they or the special + attributes are specified in the attributes to be returned. The following command searches for all replica entries in a suffix and returns the complete replica entries in LDIF format:

ldapsearch -h ldaphost -p ldapport -D binddn -w passwd -L -b "suffix"
 "objectclass=replicaObject" "*" replicaHost replicaBindDN replicaCredentials
 replicaPort replicaUpdateTimeInterval replicaUseSSL replicaBindMethod

Displaying basic replication status

The LDAP server DISPLAY REPLICAS operator modify command can be used to display information about the status of replication to each replica server. See Displaying performance information and server settings for a description of the DISPLAY REPLICAS output.