My Oracle Support Banner

OUD - How to Initialize Replica(s) Using "dsreplication" or "import-ldif" Commands (Doc ID 2166392.1)

Last updated on JUNE 14, 2023

Applies to:

Oracle Unified Directory - Version 11.1.1.5.0 and later
Information in this document applies to any platform.

Goal

This document covers how to import data / initialize replica(s) for these scenarios -
- Initialize All Servers in the Replication Topology
- Initialize Only One Server or a Subset of Servers in the Replication Topology
- Appending Data to Data That Already Exists in a Replica (Using import-ldif)
- Also how to disable/enable replication on the affected replication server, then reinitialize from a different replication server

Read this First Before Proceeding

Note1: When initializing, keep in mind that encrypted attributes should be configured in the destination replica(s) prior to initialization, like in the source replica. When the attribute encryption configuration is the same in destination replica as the source replica, there is no need to decrypt the LDIF when exporting since the encryption keys are stored in cn=admin data.
Reference: Configuring Attribute Encryption in Replication Enabled Topology

Note2: To speed up import-ldif on Linux -
1) An offline import-ldif is faster than an online import-ldif or running 'dsreplication initialize'.
2) The offline or online import-ldif JVM parameters can be configured in OUD java.properties to improve initialization performance.
Reference: OUD11g - How to Shorten Import Time When Performing 'import-ldif' Command on Millions of Entries (Doc ID 2223626.1)

Note3: When using "import-ldif" the suffix or backend will be overwritten. If there is a need to just add information, use "-a" or "--append" to append the imported data to the data that already exists in the back end. Or use ldapmodify to add entries.   This is also explained lower in this document.
Reference:
Administering Oracle Unified Directory
A.1.3 Data Administration Commands
A.1.3.6 import-ldif

A.1.4 LDAP Client Commands
A.1.4.3 ldapmodify

Note4: If "dsreplication status" shows "Not Connected", "Not Fully Connected" or "Unknown", review the below KMs:

OUD Replication: Possible Causes of SSL Handshake Failure Messages (Doc ID 1588927.1)

OUD 11g/12c - Replication "I/O Error: Connection Reset By Peer" In Backend OUD Servers (Doc ID 2489379.1)

 


 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
 Using dsreplication to initialize all servers
 Using import-ldif or a binary backup
 Using dsreplication to initialize only one server or a subset thereof
 Using a binary backup
 Using import-ldif
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.