[prev in list] [next in list] [prev in thread] [next in thread]
List: fedora-directory-users
Subject: =?utf-8?q?=5B389-users=5D?= Re: How to use Master slave replication between two different domains
From: Janet Houser <houser () nso ! edu>
Date: 2019-10-15 22:12:35
Message-ID: c034b92f-c9d1-140c-7579-4b672bd9a3a6 () nso ! edu
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hi Marc,
Thanks! Appreciate the quick response and all the links.
Cheers,
On 10/15/19 3:06 PM, Marc Sauton wrote:
> The link provided is for an older version no longer maintained.
> The current link is
> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/admin \
> istration_guide/configuring_directory_databases#Creating_Suffixes-Creating_a_New_Root_Suffix_Using_the_Console
>
> LDAP replication is designed for dedicated suffixes.
> There is no such feature to replicate to a different suffix, see:
> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/deplo \
> yment_guide/introduction_to_directory_services-introduction_to_ds#Overview_of_DS_Architecture-Overview_of_the_Basic_Directory_Tree
> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/depl \
> oyment_guide/designing_the_directory_tree-designing_directory_tree#Creating_Directory_Tree_Structure-Replication_Considerations
> and
> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_replication
> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/admi \
> nistration_guide/Configuring_Directory_Databases-Creating_and_Maintaining_Databases \
> But if needed as a one time action, it is possible to export, tune the
> resulting LDIF data, and then import into a different environment that
> is not connected to the original one.
>
> Thanks,
> M.
>
> On Tue, Oct 15, 2019 at 12:34 PM Janet Houser <houser@nso.edu
> <mailto:houser@nso.edu>> wrote:
>
> Hi Folks,
>
> I have a multimaster replication running between two servers in the
> site.edu <http://site.edu> domain. We now want to replicate this
> data (for user logins
> to resources) to
> a sister site with domain site1.edu <http://site1.edu>.
>
> I tried several things and nothing worked so I thought the best
> thing to
> do would be to ask if there's a way to populate the people,
> groups, etc via
> master-slave replication between two seperate domains.
>
> I tried creating a seperate root tree following the information here:
>
> https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.0/html/Admi \
> nistration_Guide/Configuring_Directory_Databases.html#Creating_Suffixes-Creating_a_New_Root_Suffix_Using_the_Console
>
> But replication fails because it'd not doing the translation
> between the
> domains.
>
> All suggestions (and links to info) are appreciated.
>
> Thanks,
>
> Janet
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> <mailto:389-users@lists.fedoraproject.org>
> To unsubscribe send an email to
> 389-users-leave@lists.fedoraproject.org
> <mailto:389-users-leave@lists.fedoraproject.org>
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
>
>
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: \
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: \
> https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: \
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
--
Dr. J.L. Houser
Senior Systems Administrator
National Solar Observatory
3665 Discovery Drive
Boulder, CO 80303
Office Phone: (303) 735-7357
[Attachment #5 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Marc,<br>
<br>
Thanks! Appreciate the quick response and all the links.<br>
<br>
Cheers,<br>
<br>
<div class="moz-cite-prefix">On 10/15/19 3:06 PM, Marc Sauton wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CA+ixxb1PzFU+iEFHORAfYd_XkBmr8MNXtbkK5dtO8RRUOu7J+A@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">The link provided is for an older version no longer
maintained.
<div>The current link is</div>
<div><a
href="https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/a \
dministration_guide/configuring_directory_databases#Creating_Suffixes-Creating_a_New_Root_Suffix_Using_the_Console"
moz-do-not-send="true">https://access.redhat.com/documentation/en-us/red_hat_directo \
ry_server/10/html/administration_guide/configuring_directory_databases#Creating_Suffixes-Creating_a_New_Root_Suffix_Using_the_Console</a></div>
<div><br>
<div>LDAP replication is designed for dedicated suffixes.
<div>There is no such feature to replicate to a different
suffix, see:</div>
<div><a
href="https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/d \
eployment_guide/introduction_to_directory_services-introduction_to_ds#Overview_of_DS_Architecture-Overview_of_the_Basic_Directory_Tree"
moz-do-not-send="true">https://access.redhat.com/documentation/en-us/red_hat_directo \
ry_server/10/html/deployment_guide/introduction_to_directory_services-introduction_to_ds#Overview_of_DS_Architecture-Overview_of_the_Basic_Directory_Tree</a><br>
</div>
<div><a
href="https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/d \
eployment_guide/designing_the_directory_tree-designing_directory_tree#Creating_Directory_Tree_Structure-Replication_Considerations"
moz-do-not-send="true">https://access.redhat.com/documentation/en-us/red_hat_directo \
ry_server/10/html/deployment_guide/designing_the_directory_tree-designing_directory_tree#Creating_Directory_Tree_Structure-Replication_Considerations</a><br>
</div>
<div>and</div>
<div><a
href="https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_replication"
moz-do-not-send="true">https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_replication</a><br>
</div>
<div><a
href="https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/a \
dministration_guide/Configuring_Directory_Databases-Creating_and_Maintaining_Databases"
moz-do-not-send="true">https://access.redhat.com/documentation/en-us/red_hat_directo \
ry_server/10/html/administration_guide/Configuring_Directory_Databases-Creating_and_Maintaining_Databases</a><br>
</div>
<div><br>
</div>
<div>But if needed as a one time action, it is possible to
export, tune the resulting LDIF data, and then import into
a different environment that is not connected to the
original one.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>M. </div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Tue, Oct 15, 2019 at 12:34
PM Janet Houser <<a href="mailto:houser@nso.edu"
moz-do-not-send="true">houser@nso.edu</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi
Folks,<br>
<br>
I have a multimaster replication running between two servers
in the <br>
<a href="http://site.edu" rel="noreferrer" target="_blank"
moz-do-not-send="true">site.edu</a> domain. We now want to
replicate this data (for user logins <br>
to resources) to<br>
a sister site with domain <a href="http://site1.edu"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">site1.edu</a>.<br> <br>
I tried several things and nothing worked so I thought the
best thing to <br>
do would be to ask if there's a way to populate the people,
groups, etc via<br>
master-slave replication between two seperate domains.<br>
<br>
I tried creating a seperate root tree following the
information here:<br>
<br>
<a
href="https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/8.0/html/ \
Administration_Guide/Configuring_Directory_Databases.html#Creating_Suffixes-Creating_a_New_Root_Suffix_Using_the_Console"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://access.redhat.com/documentation/en-US/Red_Hat_Directory \
_Server/8.0/html/Administration_Guide/Configuring_Directory_Databases.html#Creating_Suffixes-Creating_a_New_Root_Suffix_Using_the_Console</a><br>
<br>
But replication fails because it'd not doing the translation
between the <br>
domains.<br>
<br>
All suggestions (and links to info) are appreciated.<br>
<br>
Thanks,<br>
<br>
Janet<br>
_______________________________________________<br>
389-users mailing list -- <a
href="mailto:389-users@lists.fedoraproject.org"
target="_blank" \
moz-do-not-send="true">389-users@lists.fedoraproject.org</a><br> To unsubscribe send \
an email to <a href="mailto:389-users-leave@lists.fedoraproject.org"
target="_blank" \
moz-do-not-send="true">389-users-leave@lists.fedoraproject.org</a><br> Fedora Code \
of Conduct: <a
href="https://docs.fedoraproject.org/en-US/project/code-of-conduct/"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://docs.fedoraproject.org/en-US/project/code-of-conduct/</a><br>
List Guidelines: <a
href="https://fedoraproject.org/wiki/Mailing_list_guidelines"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://fedoraproject.org/wiki/Mailing_list_guidelines</a><br> \
List Archives: <a href="https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org"
rel="noreferrer" target="_blank" \
moz-do-not-send="true">https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org</a><br>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" \
wrap="">_______________________________________________ 389-users mailing list -- <a \
class="moz-txt-link-abbreviated" \
href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a> \
To unsubscribe send an email to <a class="moz-txt-link-abbreviated" \
href="mailto:389-users-leave@lists.fedoraproject.org">389-users-leave@lists.fedoraproject.org</a>
Fedora Code of Conduct: <a class="moz-txt-link-freetext" \
href="https://docs.fedoraproject.org/en-US/project/code-of-conduct/">https://docs.fedoraproject.org/en-US/project/code-of-conduct/</a>
List Guidelines: <a class="moz-txt-link-freetext" \
href="https://fedoraproject.org/wiki/Mailing_list_guidelines">https://fedoraproject.org/wiki/Mailing_list_guidelines</a>
List Archives: <a class="moz-txt-link-freetext" \
href="https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org" \
>https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org</a> \
> </pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Dr. J.L. Houser
Senior Systems Administrator
National Solar Observatory
3665 Discovery Drive
Boulder, CO 80303
Office Phone: (303) 735-7357</pre>
</body>
</html>
[Attachment #6 (text/plain)]
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic