1ipa-csreplica-manage(1) IPA Manual Pages ipa-csreplica-manage(1)
2
6 ipa-csreplica-manage - Manage an IPA CS replica
7
9 ipa-csreplica-manage [OPTION]... [connect|disconnect|del|list|re-ini‐
10 tialize|force-sync]
11
13 Manages the CA replication agreements of an IPA server for domain at
14 domain level 0.
15 To manage CA replication agreements in a domain at domain level 1, use
17 IPA CLI or Web UI, see `ipa help topology` for additional information.
18 connect [SERVER_A] <SERVER_B>
21 - Adds a new replication agreement between SERVER_A/localhost
22 and SERVER_B. Applicable only at domain level 0.
23 disconnect [SERVER_A] <SERVER_B>
25 - Removes a replication agreement between SERVER_A/localhost and
26 SERVER_B. Applicable only at domain level 0.
27 del <SERVER>
29 - Removes all replication agreements and data about SERVER.
30 Applicable only at domain level 0.
31 list [SERVER]
34 - Lists all the servers or the list of agreements of SERVER
35 re-initialize
37 - Forces a full re-initialization of the IPA CA server retriev‐
38 ing data from the server specified with the --from option
39 force-sync
41 - Immediately flush any data to be replicated from a server
42 specified with the --from option
43 set-renewal-master [SERVER]
45 - Set CA server which handles renewal of CA subsystem certifi‐
46 cates to SERVER
47 The connect and disconnect options are used to manage the replication
49 topology. When a replica is created it is only connected with the mas‐
50 ter that created it. The connect option may be used to connect it to
51 other existing replicas.
52 The disconnect option cannot be used to remove the last link of a
54 replica. To remove a replica from the topology use the del option.
55 If a replica is deleted and then re-added within a short time-frame
57 then the 389-ds instance on the master that created it should be
58 restarted before re-installing the replica. The master will have the
59 old service principals cached which will cause replication to fail.
60
62 -H HOST, --host=HOST
63 The IPA server to manage. The default is the machine on which
64 the command is run Not honoured by the re-initialize command.
65 -p DM_PASSWORD, --password=DM_PASSWORD
67 The Directory Manager password to use for authentication
68 -v, --verbose
70 Provide additional information
71 -f, --force
73 Ignore some types of errors
74 --from=SERVER
76 The server to pull the data from, used by the re-initialize and
77 force-sync commands.
78
80 List a server's replication agreements.
81 # ipa-csreplica-manage list srv1.example.com
82 srv2.example.com
83 srv3.example.com
84 Re-initialize a replica:
86 # ipa-csreplica-manage re-initialize --from srv2.example.com
87 This will re-initialize the data on the server where you execute
89 the command, retrieving the data from the srv2.example.com
90 replica
91 Add a new replication agreement:
93 # ipa-csreplica-manage connect srv2.example.com srv4.exam‐
94 ple.com
95 Remove an existing replication agreement:
97 # ipa-csreplica-manage disconnect srv1.example.com srv3.exam‐
98 ple.com
99 Completely remove a replica at domain level 0:
101 # ipa-csreplica-manage del srv4.example.com
102 Completely remove a replica at domain level 1:
104 # ipa-replica-manage del srv4.example.com
105 Using connect/disconnect you can manage the replication topology.
107
109 0 if the command was successful
110 1 if an error occurred
112IPA Jul 14 2011 ipa-csreplica-manage(1)