Command Line configuration of Replication

I've recently installed iDS 5.0, on Solaris 8.
I've discovered the reponse files have been scaled down from iDS 4.12.
We had utilized the SIR entries in iDS4.12 response files to automate
Supplier/Consumer installation. This feature appears to have been
removed in iDS5.0. I have identified various entries that are stored in
the dse.ldif file, when using the console to configure for multi-master
replication, but for some of the entries, such as nsDS5ReplicaName,
nsState, I don't have a clue what to assign.
I'm looking for a procedure, to configure consumers & multi-masters,
from the command-line.
I can "guess" that ldapmodify is essentially what would be used.
Trying to configure hundreds of machines for multi-master replication is
impractical via the console (GUI) interface. We need a command line
method.
Any help would be greatly appreciated.
Regards
Tom Sandholm
Sr. Unix Architect
Genuity
eBusiness Application Engineering

Tom,
Please find below 2 examples of ldapmodify commands to create replica and
replication agreements.
Regards,
Ludovic.
SUPHOST=elk
SUPPORT=389
CONS1HOST=norge
CONS1PORT=7389
MGRDN="cn=Directory Manager"
MGRPW=MySecret
BASE="ou=a"
SUPREPLICAID=2
CONS1REPLICAID=1
ldapmodify -c -b -h ${SUPHOST} -p ${SUPPORT} -D "${MGRDN}" \
-w ${MGRPW} << EOM
dn: cn=replica, cn="${BASE}", cn=mapping tree, cn=config
changetype: add
objectclass: top
objectclass: nsds5replica
objectclass: extensibleObject
cn: replica
nsds5replicaroot: ${BASE}
nsds5replicaid: ${SUPREPLICAID}
nsds5replicatype: 3
nsds5flags: 1
nsds5replicabinddn: cn=Replication Manager, cn=config
EOM
Use nsds5ReplicaType: 2 for a readonly replica.
Use nsds5ReplicaType: 3 for a master replica.
The nsds5flags: 1 means to log the changes (must be set on master or hub
replica).
You don't need to set state and name since they are generated by the
replication code.
Make sure nsds5replicaId are different for master replicas. You can use the
same replica id for all read-only consumers (but a different one from the
masters).
ldapmodify -c -b -h ${SUPHOST} -p ${SUPPORT} -D "${MGRDN}" \
-w ${MGRPW} << EOM
dn: cn=agmt${AgmtNum}, cn=replica, cn="${BASE}", cn=mapping tree, cn=config
changetype: add
objectclass: top
objectclass: nsDS5ReplicationAgreement
cn: agmt${AgmtNum}
nsDS5ReplicaHost: ${CONS1HOST}
nsDS5ReplicaPort: ${CONS1PORT}
nsDS5ReplicaBindDN: cn=Replication Manager, cn=config
nsDS5ReplicaCredentials: secret12
nsDS5ReplicaBindMethod: SIMPLE
nsDS5ReplicaRoot: ${BASE}
description: A sample replication agreement.
EOM
Tom Sandholm wrote:
I've recently installed iDS 5.0, on Solaris 8.
I've discovered the reponse files have been scaled down from iDS 4.12.
We had utilized the SIR entries in iDS4.12 response files to automate
Supplier/Consumer installation. This feature appears to have been
removed in iDS5.0. I have identified various entries that are stored in
the dse.ldif file, when using the console to configure for multi-master
replication, but for some of the entries, such as nsDS5ReplicaName,
nsState, I don't have a clue what to assign.
I'm looking for a procedure, to configure consumers & multi-masters,
from the command-line.
I can "guess" that ldapmodify is essentially what would be used.
Trying to configure hundreds of machines for multi-master replication is
impractical via the console (GUI) interface. We need a command line
method.
Any help would be greatly appreciated.
Regards
Tom Sandholm
Sr. Unix Architect
Genuity
eBusiness Application Engineering--
Ludovic Poitou
Sun Microsystems Inc.
iPlanet E-Commerce Solutions - Directory Group - Grenoble - France

Similar Messages

  • WDS 2012 standalone mode command line configuration

    To configure WDS on command line I can run this: wdsutil /initialize-server /reminst:E:\RemoteInstall
    However, I'd like to initialize WDS in standalone from the command line. Any ideas?
    Thanks!

    Well here's a really ugly way to do it with autohotkey:
    Run, WdsMgmt.msc
    WinWait,Windows Deployment Services,Windows Deployment Services
    WinActivate
    Sleep 1000
    ControlSend,SysTreeView321,{Down},Windows Deployment Services
    Sleep 1000
    ControlSend,SysTreeView321,{Right},Windows Deployment Services
    Sleep 1000
    ControlSend,SysTreeView321,{Down},Windows Deployment Services
    Sleep 1000
    Send {Alt}+a
    Sleep 1000
    Send c
    WinWait,Windows Deployment Services Configuration Wizard,You can use this wizard to configure Windows Deployment Services
    ControlClick,&Next >,Windows Deployment Services Configuration Wizard
    WinWait,Windows Deployment Services Configuration Wizard,Select one of the following options
    ControlClick,&Standalone server,Windows Deployment Services Configuration Wizard
    Sleep 1000
    ControlClick,&Next >,Windows Deployment Services Configuration Wizard
    WinWait,Windows Deployment Services Configuration Wizard,The remote installation folder will contain boot images
    ControlSetText,Edit1,E:\RemoteInstall,Windows Deployment Services Configuration Wizard
    Sleep 1000
    ControlClick,&Next >,Windows Deployment Services Configuration Wizard
    WinWait,Windows Deployment Services Configuration Wizard,You can use these settings to define which client
    ControlClick,&Next >,Windows Deployment Services Configuration Wizard
    WinWait,Windows Deployment Services Configuration Wizard,You have successfully configured Windows Deployment Services
    ControlClick,&Add images to the server now,Windows Deployment Services Configuration Wizard
    Sleep 1000
    ControlClick,Finish,Windows Deployment Services Configuration Wizard
    Exit, 0

  • Command line configuration

    I need to perform 3 configurations via command line in order to automate firefox deployment in my company. These are 1) add a smart card. 2) import certs. 3) alter settings in about:config. All of these are normally done through the Firefox GUI. How can they be done command line?

    I need to perform 3 configurations via command line in order to automate firefox deployment in my company. These are 1) add a smart card. 2) import certs. 3) alter settings in about:config. All of these are normally done through the Firefox GUI. How can they be done command line?

  • Command line for replication setup for DS 4.16

    I am using Directory Server 4.16. I see example using command line for replication configuration in DS 5.0. Since 5.0 is quite different with 4.16. So my question is how to use command line to set up a Supplier in DS 4.16?
    I know we can use ldapmodify to do some change. I see an ldapreplica entry. I can setup supplier id and password there. It seems only change that entry is not enough. Where to setup the setup for "changedatabase", "replication schedule", "initial consumer later" something we do at the console screen?
    Your help is greatly appreciated.
    Iris

    Hi Iris
    Steps involved in Setting up Replication from command line
    Part I: On Consumer Directory Server
    1. Log on to the consumer directory server.
    2. Stop the consumer directory server
    3. Edit the slapd.conf file at <server-root>/slapd-<server-instance>/config so that it includes the following two lines. The lines show the DN of who is allowed to connect for replication and the entry's corresponding password.
    updatedn "uid=<REPLICA USER BIND DN>"
    updatepw {SHA}<SHA ENCRYPTED REPLICA USER PASSWORD>
    4. Edit the dse.ldif file at <server-root>/slapd-<server-instance>/config so that the entry cn=config contains the following two lines. These lines contain the same data as the line above.
    nsslapd-updatedn: uid=<REPLICA USER BIND DN>
    nsslapd-updatepw: <PLAIN TEXT REPLICA USER PASSWORD>
    5. Start the consumer directory server
    Part II: Creating the Replication Agreement
    1. Log on to the master directory server
    2. Stop the master directory server
    3. Edit the slapd.conf file at <server-root>/slapd-<server-instance>/config so that it includes the following two lines. This lines setup the changelog directory and suffix.
    changelogdir <dir path >
    changelogsuffix "cn=changelog"
    4. mkdir <CHANGELOG DIR>
    5. Start the master directory server
    6. Create a file named replica.ldif which contains the following lines. These lines reflect the agreement which will start the replication with the consumer; as such you should make the changes to reflect your environment.
    dn: cn=<CONSUMER FQDN>:<CONSUMER PORT>/o%3D<BASE DN>, cn=ldap://:<SUPPLIER
    PORT>,dc=<1ST ELEMENT OF SUPPLIER FQDN>,dc=<2ND ELEMENT OF SUPPLIER
    FQDN>,...,<TOP LEVEL SUPPLIER FQDN>
    changetype: add
    objectclass: top
    objectclass: LDAPReplica
    replicahost: <CONSUMER FQDN>
    replicaport: 389
    replicanickname: <CONSUMER HOSTNAME>
    cn: <CONSUMER FQDN>:<CONSUMER PORT>/o%3D<BASE DN>
    replicaroot: o=<BASE DN>
    replicabinddn: uid=<REPLICA USER BIND DN>
    replicacredentials: <REPLICA USER PASSWORD>
    replicausessl: 0
    7. Run ldapmodify with the proper authorization so that the entry is added correctly.
    8. There is an optional attribute which can be tacked on to the bottom of the above entry. The attribute 'replicabeginorc' will tell the server to immediately start on-line replication; this will initialize the consumer by deleting all the current entries on the consumer one at a time and then adding all the entries from the master one at a time. If this is something you want to do, do an ldapmodify adding this attribute to the entry you just created in step 8.
    for example
    Create a file called beginreplica.ldif like;
    dn: cn=xymox.mcom.com:389/o%3Dinternet, cn=ldap://:389,dc=fts,dc=mcom,dc=com
    changetype: modify
    add: replicabeginorc:
    replicabeginorc: start
    then run;
    ldapmodify -h fts -p 389 -D "cn=Directory Manager" -w netscape -f beginreplica.ldif
    Hope this helps
    Roy

  • [svn:bz-trunk] 17010: Bug: Watson #2652870 - use a property file to drive the custom configuration tokens as opposed to setting it in the command line

    Revision: 17010
    Revision: 17010
    Author:   [email protected]
    Date:     2010-07-22 02:52:41 -0700 (Thu, 22 Jul 2010)
    Log Message:
    Bug: Watson #2652870 - use a property file to drive the custom configuration tokens as opposed to setting it in the command line
    QA: Yes
    Doc: Yes - in custom tokens section, talk about the new token.file option
    Checkintests: Pass
    Details: Changed TokenReplacer to look for a token.file JVM option. If it's specified (eg. -Dtoken.file=/User/matamel/Desktop/token.properties), then TokenReplacer looks for a properties file where token name and values are specified. This allows someone to specify a file for custom tokens. Custom tokens can still be specified as straight JVM option and in case where a token is defined both as a JVM option and in a token properties file, JVM option takes precedence.
    Modified Paths:
        blazeds/trunk/modules/common/src/flex/messaging/config/TokenReplacer.java

    Remember that Arch Arm is a different distribution, but we try to bend the rules and provide limited support for them.  This may or may not be unique to Arch Arm, so you might try asking on their forums as well.

  • Setting IIS W3C Extended Log File settings via command line, registry or configuration file

    I am currently in need of a way to set IIS W3C Extended Log File settings via command line, registry or configuration file.  More specifically the 'Bytes Sent (sc-bytes)' and 'Bytes Received (cs-bytes)' settings that are not enabled by default. 
    If anyone knows where I can locate these setting (outside of the GUI) for all IIS versions that would be greatly appreciated.

    I believe I have found a valid solution. You must have the WebAdministration module loaded.  I hope this helps someone.
    Use the following syntax to view current W3C fields:
    Get-WebConfiguration -filter system.applicationhost/sites/sitedefaults/logfile | select-object -expandProperty logExtFileFlags
    Use the following syntax to set W3C fields:
    Set-WebConfigurationProperty -Filter System.Applicationhost/Sites/SiteDefaults/logfile -Name LogExtFileFlags -Value "Date,Time,ClientIP,UserName,SiteName,ComputerName,ServerIP,Method,UriStem,UriQuery,HttpStatus,Win32Status,BytesSent,BytesRecv,TimeTaken,ServerPort,UserAgent,Cookie,Referer,ProtocolVersion,Host,HttpSubStatus"}

  • How to configure Team explorer 2010 command-line tool in Mac x os. configure shell or system path to include the folder to which (TF client) unzipped archive available.

    How to configure Team explorer 2010 command-line tool in Mac x os.
    Hot to configure shell or system path to include the folder to which (TF client) unzipped archive available. I am new to Mac X OS. Please help.

    Dmitry,
    Thanks for the great writeup!
    I think I've got my universal instant client libraries built correctly.
    I too am using MacBook Pro but I'm getting stuck at building the 32 bit oci8.so
    First problem is my pecl download (ver 1.4.1) did not contain a "configure" file so ./configure failed.
    I used configure from /sw/....... to try to continue.
    Second problem. Using existing configure from /sw/.... I used an appropriate variation of your example command
    (./configure --with-oci8=instantclient,/usr/local/oracle/instantclient_10_2 && make).
    Things look like everything ran OK but The output does NOT include an oci8.so file
    So I guess my question is: Which "configure" should I be using? And if it is not the one on the system under /sw/...
    where would I get it since it doesn't come in the pecl download?

  • How to load the boot menu using the command line , after the configuration change ?

    how to load the boot menu using the command line , after the configuration change ?

    Hi @Bask-48 
    Welcome to the HP Forums!
    It is a terrific place to find answers.
    For you to have the best experience in the HP forum I would like to direct your attention to the HP Forums Guide Learn How to Post and More
    I grasp you are trying to change the boot order.  Here is a link to Configuring the Boot Order in the System BIOS
    that will assist you.
    Good Luck and Happy Holidays!
    Sparkles1
    I work on behalf of HP
    Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos, Thumbs Up" on the bottom right to say “Thanks” for helping!

  • Any way to configure Oracle Vault .through command line

    I wanted to configure Oracle Vault in our enviornment
    I'm looking for some options to configuer through command line
    Is it possible if yes the steps / any reference.
    PS : New to this forum pl. excuse if its a repated one (tried to see relevant one but didn't find any) if any one can direct it would be greate.
    Edited by: 932549 on May 11, 2012 8:55 AM

    Hey man I would help with your question. But I also have some Q's. How can I email apple for my concerns? And how can I post my RSS OR in the forum is complicate. As you know for the iPhone apple hasn't changed the way the os looks like it's pretty simple. Last night I was in the T-Mobile store and I saw the new G2 I'm not a android fan just because of their lags. Apperantly the G2 was pretty responsive and I'm sick and tired of apples os for the iPhone its stuck in the past. Apple has to get more creative than android and get it going. Make the iOS 5.0 prettier than androids os. Please

  • Configuration attributes on the command line

    I use in a command line -Dweblogic.configurl="t3://localhost:7001" when I
    start the weblogic.
    configurl is my own attribute.
    How I can get the attribute value "t3://localhost:7001" inside the Bean.
    I tried System.getParameter("configurl") but it doesen't work.
    -Jussi

    I beleive -Dweblogic.RootDirectory=<mydirname> will do the trick.
    Yash Sathaye wrote:
    Is it possible to change the working directory of a managed server? I
    am using WLS 6.1SP2 on Solaris. WebLogic was installed by user A. The
    EAR file was deployed using the IIOP and management EJB's provided by
    BEA. That was done by user B. User B wants that the managed server
    he/she created should use a directory other than the weblogic
    installation directory as the working directory (for creating the log
    files, for extracting classes from the EAR etc. etc.) The reason for
    this that user B does not have write access to the weblogic
    installation directories.
    Is there a way to change the working directory of the managed server
    on the command line while starting it? Are there any configuration
    attributes like bea.home or weblogic.Domain etc. etc. that we use to
    start the managed servers?
    Please let me know
    thanks in advance

  • How to start iSQL*Plus configuration Assistant on Command Line?

    I have almost successfully installed oralce 10gR2 in opensolaris 5.11, In the final stage, Among the three Configuration Assistants:
    the Net Configuration Assistant and Database Configuration Assistant have completed successfully, but OUI hang in the iSQL*Plus Configuration Assistant.
    No response after a very long time.
    Could anybody tell me how to manually start iSQL*Plus configuration Assistant on Command Line?
    Thanks a lot !
    Edited by: user11970554 on 2009-10-5 上午9:21

    Thanks.
    Anyhow, I found an easier way to do this:
    1)Just run installer again to start the OUI:
    #./runInstaller
    2)Choose "Custom" installation option
    3)check the box at "iSQL*Plus" for reinstall
    4)The OUI will first deinstall iSQL*Plus, and then reinstall it, and will automatically start "iSQL*Plus configuration Assistant".
    This procedure applies to any component of oracle which failed at first time installation.

  • Configuring Shutdown without logon, using command line or script

    I´ve configured the shutdown without logon capability in Win2012/R2 using the GPEDIT.MSC
    How cna i do that by command line?
    In the past i could use the reg key ShutdownWithoutLogon, but i´ve configured in the GUI but nothing happened in the registry of the win2012/R2
    C:\>reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v ShutdownWithoutLogon
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
        ShutdownWithoutLogon    REG_SZ    0
    How can i do that, automated, to configure several computers in workgroup environment

    Hi KayZerSoze,
    Since there has no domain enviroment, remote access is more difficult. However,  if the network allows this two workgroups can communicate with each other, you can try Powershell Remoting:
    Server 1 remote access Server 2.
    1) Run
    Enable-PSRemoting –Force on server2
    You need to run
    Enable-PSRemoting –Force on server1, which gives you the rights to access and modify TrustedHosts setting, or you will receive the error “Set-Item : Access is denied.”
    2) You can add the TrustedHosts entry on server1:
    Set-Item WSMan:\localhost\Client\TrustedHosts –Value remoteipaddress
    This command above configures Windows PowerShell Remoting so that you can connect to any computer, not just those inside trusted domain(s).
    Then run the script below to change registry value on server2 with Powershell, which will change the value of "ShutdownWithoutLogon"
    to "1":
    Invoke-Command -ComputerName server2ipaddress -Credential admin -ScriptBlock {Set-itemproperty -path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" -name ShutdownWithoutLogon -value 1}
    For more detailed information about Powershell Remoting, please Refer to this FAQ:
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/f60a29ef-925e-4712-9788-1f95e12c8cfc/forum-faq-introduce-windows-powershell-remoting?forum=winserverpowershell
    If there is anything else regarding this script, please feel free to post back.
    Best Regards,
    Anna Wang

  • Toshiba VAP - Button Support - command line options configuration

    Hi,
    I need to configure Button Support Drivers for Portege Series Laptops as part of deploying Windows 7 x 64 bit Enterprise on the following models: Z830, Z930 and R930.
    I need to install Toshiba Value Added Package with only Flash Card option.
    What command line options are present to do this?
    I am looking to deploy this via SCCM.
    Thanks,

    That is a way to approach setup.exe in general, but the great Toshiba VAP doesn't provide you with such options that you can call out.
    I have tried several methods, but there seems to be no way to install Button Support / Flash Cards alone. I can not believe no one has installed TVAP in an enterprise?
    In an enterprise environment, you wouldn't necessarily give users access to encryption and password utilities, specific to laptop models. However, you need the app so the button support at least works, instead of providing the customer with a Laptop having non functional buttons!!
    Is there any thread that points to or can Toshiba support help enterprise customers to deploy TVAP?
    I have less hope, with the experience I have had with this app.

  • HT1277 I want to set up my email composition with a default me@alumni.myschool.edu address that is different from my ISP.  How do I configure?  Command line OK with me.

    Hi everyone,
    I want to set up my email composition with a default [email protected] address in the "Reply-to" field that is different from my ISP.  How do I configure mail to set this default? 
    I have looked through the help and fail to see an option in the Preferences -> Compose window. 
    I am OK with UNIX Command line tasks if that is the only way to set this default.
    Basically I have an alumni email redirection service, which is an address that never changes, even if I change ISP.  That way all my friends can use it an never change.  However, they tend to use whatever ISP address is, not what I have asked them to use. 
    I want to force emails I send to default to my alumni address when my friends reply, not my ISP address.  I want control over this.

    Confused Once Again wrote:
    I want to set up my email composition with a default [email protected] address in the "Reply-to" field that is different from my ISP.  How do I configure mail to set this default? 
    Email preferences --> select Account --> Account Information tab --> Email address.
    The Email address setting supplies the "from" mail address in a sent email for that account.
    I  been doing this for years (well in Eudora but it works in Mail too) since my return address is a mail forwarding service.  That lets me switch ISP's and no one is ever the wiser.  I just change the forwarding service "pointer" to point to my new ISP.  But everyone else see sees the same "from" address as it's always been.

  • Replication: send updates now = command line?

    Hi!
    Is there any possiblity to send a command via command line to the slapd
    process that causes the same behavior like the console command "send
    updates now"?
    TIA
    Achim

    Yes. Using ldapsearch and ldapmodify.
    ldapmodify -args
    dn: cn=your replication agreement, cn=replica, ......
    changetype: modify
    add: nsds5ReplicaUpdateSchedule
    nsds5ReplicaUpdateSchedule: *
    ldapmodify -args
    dn: cn=your replication agreement, cn=replica, ......
    changetype: modify
    delete: nsds5ReplicaUpdateSchedule
    nsds5ReplicaUpdateSchedule: *
    Achim Krisinger wrote:
    Hi!
    Is there any possiblity to send a command via command line to the slapd
    process that causes the same behavior like the console command "send
    updates now"?
    TIA
    Achim

Maybe you are looking for