OUD - How to Initialize Replica(s) Using "dsreplication" or "import-ldif" Commands
(Doc ID 2166392.1)
Last updated on JUNE 14, 2023
Applies to:
Oracle Unified Directory - Version 11.1.1.5.0 and laterInformation in this document applies to any platform.
Goal
This document covers how to import data / initialize replica(s) for these scenarios -
- Initialize All Servers in the Replication Topology
- Initialize Only One Server or a Subset of Servers in the Replication Topology
- Appending Data to Data That Already Exists in a Replica (Using import-ldif)
- Also how to disable/enable replication on the affected replication server, then reinitialize from a different replication server
Read this First Before Proceeding
Note1: When initializing, keep in mind that encrypted attributes should be configured in the destination replica(s) prior to initialization, like in the source replica. When the attribute encryption configuration is the same in destination replica as the source replica, there is no need to decrypt the LDIF when exporting since the encryption keys are stored in cn=admin data.
Reference: Configuring Attribute Encryption in Replication Enabled Topology
Note2: To speed up import-ldif on Linux -
1) An offline import-ldif is faster than an online import-ldif or running 'dsreplication initialize'.
2) The offline or online import-ldif JVM parameters can be configured in OUD java.properties to improve initialization performance.
Reference: OUD11g - How to Shorten Import Time When Performing 'import-ldif' Command on Millions of Entries (Doc ID 2223626.1)
Note3: When using "import-ldif" the suffix or backend will be overwritten. If there is a need to just add information, use "-a" or "--append" to append the imported data to the data that already exists in the back end. Or use ldapmodify to add entries. This is also explained lower in this document.
Reference:
Administering Oracle Unified Directory
A.1.3 Data Administration Commands
A.1.3.6 import-ldif
A.1.4 LDAP Client Commands
A.1.4.3 ldapmodify
Note4: If "dsreplication status" shows "Not Connected", "Not Fully Connected" or "Unknown", review the below KMs:
OUD Replication: Possible Causes of SSL Handshake Failure Messages (Doc ID 1588927.1)
OUD 11g/12c - Replication "I/O Error: Connection Reset By Peer" In Backend OUD Servers (Doc ID 2489379.1)
Solution
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Goal |
Solution |
Using dsreplication to initialize all servers |
Using import-ldif or a binary backup |
Using dsreplication to initialize only one server or a subset thereof |
Using a binary backup |
Using import-ldif |
References |