1ipa-csreplica-manage(1)      FreeIPA Manual Pages      ipa-csreplica-manage(1)
2
3
4

NAME

6       ipa-csreplica-manage - Manage an IPA CS replica
7

SYNOPSIS

9       ipa-csreplica-manage  [OPTION]...  [connect|disconnect|del|list|re-ini‐
10       tialize|force-sync]
11

DESCRIPTION

13       Manages the CA replication agreements of an IPA server  for  domain  at
14       domain level 0.
15
16       To  manage CA replication agreements in a domain at domain level 1, use
17       IPA CLI or Web UI, see `ipa help topology` for additional information.
18
19
20       connect [SERVER_A] <SERVER_B>
21              - Adds a new replication  agreement  between  SERVER_A/localhost
22              and SERVER_B. Applicable only at domain level 0.
23
24       disconnect [SERVER_A] <SERVER_B>
25              - Removes a replication agreement between SERVER_A/localhost and
26              SERVER_B. Applicable only at domain level 0.
27
28       del <SERVER>
29              - Removes all replication  agreements  and  data  about  SERVER.
30              Applicable only at domain level 0.
31
32
33       list [SERVER]
34              - Lists all the servers or the list of agreements of SERVER
35
36       re-initialize
37              -  Forces a full re-initialization of the IPA CA server retriev‐
38              ing data from the server specified with the --from option
39
40       force-sync
41              - Immediately flush any data to  be  replicated  from  a  server
42              specified with the --from option
43
44       set-renewal-master [SERVER]
45              -  Set  CA server which handles renewal of CA subsystem certifi‐
46              cates to SERVER
47
48       The connect and disconnect options are used to manage  the  replication
49       topology.  When a replica is created it is only connected with the mas‐
50       ter that created it. The connect option may be used to  connect  it  to
51       other existing replicas.
52
53       The  disconnect  option  cannot  be  used  to remove the last link of a
54       replica. To remove a replica from the topology use the del option.
55
56       If a replica is deleted and then re-added  within  a  short  time-frame
57       then  the  389-ds  instance  on  the  master  that created it should be
58       restarted before re-installing the replica. The master  will  have  the
59       old service principals cached which will cause replication to fail.
60

OPTIONS

62       -H HOST, --host=HOST
63              The  IPA  server to manage.  The default is the machine on which
64              the command is run Not honoured by the re-initialize command.
65
66       -p DM_PASSWORD, --password=DM_PASSWORD
67              The Directory Manager password to use for authentication
68
69       -v, --verbose
70              Provide additional information
71
72       -f, --force
73              Ignore some types of errors
74
75       --from=SERVER
76              The server to pull the data from, used by the re-initialize  and
77              force-sync commands.
78

EXAMPLES

80       List a server's replication agreements.
81               # ipa-csreplica-manage list srv1.example.com
82               srv2.example.com
83               srv3.example.com
84
85       Re-initialize a replica:
86               # ipa-csreplica-manage re-initialize --from srv2.example.com
87
88              This will re-initialize the data on the server where you execute
89              the command,  retrieving  the  data  from  the  srv2.example.com
90              replica
91
92       Add a new replication agreement:
93               #   ipa-csreplica-manage  connect  srv2.example.com  srv4.exam‐
94              ple.com
95
96       Remove an existing replication agreement:
97               # ipa-csreplica-manage disconnect  srv1.example.com  srv3.exam‐
98              ple.com
99
100       Completely remove a replica at domain level 0:
101               # ipa-csreplica-manage del srv4.example.com
102
103       Completely remove a replica at domain level 1:
104               # ipa-replica-manage del srv4.example.com
105
106       Using connect/disconnect you can manage the replication topology.
107

EXIT STATUS

109       0 if the command was successful
110
111       1 if an error occurred
112
113
114
115FreeIPA                           Jul 14 2011          ipa-csreplica-manage(1)
Impressum