Wednesday, May 22, 2019

[389-users] Re: referral on update equivalent with dsconf

replying to myself to clarify the original doubt:

executing something like this on master1 machine:

dsconf master1 repl-agmt create --suffix dc=global --host slave1.example.net --port 389 --conn-protocol LDAP --bind-dn cn=repmanager,cn=config --bind-passwd XXXXXXXX --bind-method SIMPLE master1-to-slave1

will create replication agreement as described in 15.2.4. of official docs AND will modify nsslapd-state and nsslapd-referral on slave1 as described in 15.2.2. so you don't need to manually perform that last step on consumers.



and I would like to note too that enabling replication with dsconf will also create replication manager if you specify --bind-passwd so you save an extra step.
the command should be something like this:

dsconf master1 replication enable --suffix dc=global --role master --replica-id 666 --bind-dn "cn=repmanager,cn=config" --bind-passwd YYYYYYY


I'll leave all this here just in case any other script lover needs to modify their recipes.


good job!

abosch

----- Missatge original -----
> De: "Angel Bosch" <abosch@ticmallorca.net>
> Per: "General discussion list for the 389 Directory server project." <389-users@lists.fedoraproject.org>
> Enviats: Dimecres, 22 de Maig 2019 9:32:30
> Assumpte: [389-users] Re: referral on update equivalent with dsconf
>
> > which is why the cli tools were misleading you here sadly. I think
> > we as a team, need to review and understand what happened here to
> > cause them to mislead a person about their function. :(
> >
> > Sorry that this confusion occured. Does my answer help?
> >
>
> sure! you're answers are always very deep and insightful.
>
> for me the main problem is that new DS 1.4 is right here but docs are
> still about 1.3 and I'm trying to translate my scripts and recipes.
>
> I was using some kind of old wrappers to install, configure and
> launch my instances and I'm struggling with new tools.
>
> that being said, I love those new tools! they can need some polishing
> but dsconf and dsctl are awesome!
>
> keep it this way guys!
>
>
> abosch
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to
> 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
>
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

No comments:

Post a Comment