TDS 6.3 双向复制 配置手册

Prepare Step(server1, server2):
1 create user
2 create instance
3 create suffix(dc=cn,dc=com,dc=xxxxxx)
    idsxcfg

4 ./ldapadd -D cn=root -w xxxxx

dn:dc=cn,dc=com,dc=xxxxxx
objectclass:top
objectclass:domain
objectclass: ibm-replicationContext
dc:xxxxxx
4.1 如果加不上需要使用如下命令修改
./ldapmodify -D cn=root -w xxxxx
dn:dc=cn,dc=com,dc=xxxxxx
objectclass:top
objectclass:domain
objectclass: ibm-replicationContext
dc:cn

5 ./ldapsearch -D cn=root -w xxxxx -b dc=cn,dc=com,dc=xxxxxx objectclass=*

Configure Step:
1 (server1, server2)
./idsslapd -I idsldap -a
2 (server1, server2)
./idsdiradm -I idsldap
3 (server1, server2)
./idsldapadd -D cn=root -w xxxxx -i ./1234.ldif    

==1234.ldif

dn: cn=Master Server, cn=configuration
objectclass: ibm-slapdReplication
cn: Master Server
ibm-slapdMasterDN: cn=any
ibm-slapdMasterPW: secret

3.1 (server1, server2)
./ldapsearch -D cn=root -w xxxxx -b cn=configuration objectclass=*

4 (server1, server2)
./idsslapd -I idsldap -k


5 (server1, server2)
back up ibmslapd.conf

6 server1 上 create a file mycredentialsfile.ldif，copy to server2
==sbin/mycredentialsfile.ldif

dn: cn=replication,cn=IBMpolicies
objectclass: container
###Bind Credentials/method to peer server - replication agreement
###points to this.
dn: cn=simple,cn=replication,cn=IBMpolicies
objectclass:ibm-replicationCredentialsSimple
cn:simple
replicaBindDN:cn=any
replicaCredentials:secret
description:Bind method of the peer master (server1)to the peer (server2)

7  (server1, server2)
./idsldif2db -r no -i ./mycredentialsfile.ldif -I idsldap

7.1 (server1, server2)
./ldapsearch -D cn=root -w xxxxx -b  cn=replication,cn=IBMpolicies objectclass=*



8  server1
./idsldif2db -r no -i ./mytopologyfile.ldif -I idsldap
可能会出错，可以一个一个的执行
8.1 ./ldapsearch -D cn=root -w xxxxx -b  ibm-replicaGroup=default,dc=cn,dc=com,dc=xxxxxx objectclass=*
12.0 server2 查出 key salt（例如l|}OzPtwW{B< ）

./ldapsearch -D cn=root -w xxxxx -b "cn=crypto,cn=localhost" -s base objectclass=* ibm-slapdCryptoSalt

==http://pingyuan.itpub.net/post/15272/479155

12:server 1 上执行
  ./idsdb2ldif -s dc=cn,dc=com,dc=xxxxxx  -o mymasterfile.ldif    -k xxxxxxxxxx  -t 'l|}OzPtwW{B<'


15:server 2 上执行
 ./idsldif2db  -r no -i mymasterfile.ldif




=======================================
添加一个用户
./ldapadd -D cn=root -w xxxxx
dn: cn=users2,dc=cn,dc=com,dc=xxxxxx
objectclass: container
objectclass: top

cn: users2

如果配置之后出现一个TDS服务器不能添加或者修改属性/对象类， 可以直接拷贝另外一个TDS服务器的V3.modifiedschema到readOnly的那个TDS服务器上。