This is the command ipa-csreplica-manage that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator
PROGRAM:
NAME
ipa-csreplica-manage - Manage an IPA CS replica
SYNOPSIS
ipa-csreplica-manage [OPTION]... [connect|disconnect|del|list|re-initialize|force-sync]
DESCRIPTION
Manages the CA replication agreements of an IPA server for domain at domain level 0.
To manage CA replication agreements in a domain at domain level 1, use IPA CLI or Web UI,
see `ipa help topology` for additional information.
connect [SERVER_A] <SERVER_B>
- Adds a new replication agreement between SERVER_A/localhost and SERVER_B.
Applicable only at domain level 0.
disconnect [SERVER_A] <SERVER_B>
- Removes a replication agreement between SERVER_A/localhost and SERVER_B.
Applicable only at domain level 0.
del <SERVER>
- Removes all replication agreements and data about SERVER. Applicable only at
domain level 0.
list [SERVER]
- Lists all the servers or the list of agreements of SERVER
re-initialize
- Forces a full re-initialization of the IPA CA server retrieving data from the
server specified with the --from option
force-sync
- Immediately flush any data to be replicated from a server specified with the
--from option
set-renewal-master [SERVER]
- Set CA server which handles renewal of CA subsystem certificates to SERVER
The connect and disconnect options are used to manage the replication topology. When a
replica is created it is only connected with the master that created it. The connect
option may be used to connect it to other existing replicas.
The disconnect option cannot be used to remove the last link of a replica. To remove a
replica from the topology use the del option.
If a replica is deleted and then re-added within a short time-frame then the 389-ds
instance on the master that created it should be restarted before re-installing the
replica. The master will have the old service principals cached which will cause
replication to fail.
OPTIONS
-H HOST, --host=HOST
The IPA server to manage. The default is the machine on which the command is run
Not honoured by the re-initialize command.
-p DM_PASSWORD, --password=DM_PASSWORD
The Directory Manager password to use for authentication
-v, --verbose
Provide additional information
-f, --force
Ignore some types of errors
--from=SERVER
The server to pull the data from, used by the re-initialize and force-sync
commands.
EXAMPLES
List a server's replication agreements.
# ipa-csreplica-manage list srv1.example.com
srv2.example.com
srv3.example.com
Re-initialize a replica:
# ipa-csreplica-manage re-initialize --from srv2.example.com
This will re-initialize the data on the server where you execute the command,
retrieving the data from the srv2.example.com replica
Add a new replication agreement:
# ipa-csreplica-manage connect srv2.example.com srv4.example.com
Remove an existing replication agreement:
# ipa-csreplica-manage disconnect srv1.example.com srv3.example.com
Completely remove a replica at domain level 0:
# ipa-csreplica-manage del srv4.example.com
Completely remove a replica at domain level 1:
# ipa-replica-manage del srv4.example.com
Using connect/disconnect you can manage the replication topology.
EXIT STATUS
0 if the command was successful
1 if an error occurred
Use ipa-csreplica-manage online using onworks.net services
