75 lines
4.9 KiB
HTML
75 lines
4.9 KiB
HTML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
||
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="dc.language" scheme="rfc1766" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<meta name="dc.date" scheme="iso8601" content="2005-09-06" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow"/>
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<title>Directory Server (LDAP) - Add the supplier information to the replica</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="ic.css" />
|
||
|
|
</head>
|
||
|
|
<body>
|
||
|
|
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
|
||
|
|
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
|
||
|
|
|
||
|
|
<a name="rzahyaddsupply"></a>
|
||
|
|
<h4 id="rzahyaddsupply">Add the supplier information to the replica</h4>
|
||
|
|
<p>You need to change the replica's configuration to identify who is authorized
|
||
|
|
to replicate changes to it, and add a referral to a master.</p>
|
||
|
|
<p>On the machine where you are creating the replica:</p>
|
||
|
|
<ol type="1">
|
||
|
|
<li>Expand <span class="bold">Replication management</span> in the navigation
|
||
|
|
area and click <span class="bold">Manage replication properties</span>.
|
||
|
|
<a name="wq238"></a>
|
||
|
|
<div class="notetitle" id="wq238">Note:</div>
|
||
|
|
<div class="notebody">You must log into the Web administration tool as a projected OS/400
|
||
|
|
user with *ALLOBJ and *IOSYSCFG special authorities to change settings in
|
||
|
|
the <span class="bold">Manage replication properties</span> panels.</div></li>
|
||
|
|
<li>Click <span class="bold">Add</span>.</li>
|
||
|
|
<li>Select a supplier from the <span class="bold">Replicated subtree</span> drop-down menu or enter the name of the replicated subtree for which
|
||
|
|
you want to configure supplier credentials. If you are editing supplier credentials,
|
||
|
|
this field is not editable.</li>
|
||
|
|
<li>Enter the replication bindDN. In this example, cn=any.
|
||
|
|
<a name="wq239"></a>
|
||
|
|
<div class="notetitle" id="wq239">Note:</div>
|
||
|
|
<div class="notebody">You can use either of these two options, depending on
|
||
|
|
your situation.
|
||
|
|
<ul>
|
||
|
|
<li>Set the replication bind DN (and password) and a default referral
|
||
|
|
for all subtrees replicated to a server using the 'default credentials and
|
||
|
|
referral'. This might be used when all subtrees are replicated from the same
|
||
|
|
supplier.</li>
|
||
|
|
<li>Set the replication bind DN and password independently for each
|
||
|
|
replicated subtree by adding supplier information for each subtree. This
|
||
|
|
might be used when each subtree has a different supplier (that is, a different
|
||
|
|
master server for each subtree).</li></ul></div></li>
|
||
|
|
<li>Depending on the type of credential, enter and confirm the credential
|
||
|
|
password. (You previously recorded this for future use.)
|
||
|
|
<ul>
|
||
|
|
<li><span class="bold">Simple Bind</span> - Specify the DN and password</li>
|
||
|
|
<li><span class="bold">Kerberos</span> - If the credentials on the supplier do
|
||
|
|
not identify the principal and password, that is, the server's own service
|
||
|
|
principal is to be used, then the bind DN is ibm-kn=ldap/<<span class="italic">yourservername</span>@<span class="italic">yourrealm</span>>. If the credentials
|
||
|
|
has a principal name such as <<span class="italic">myprincipal</span>@<span class="italic">myrealm</span>>, use that as the DN. In either case a password in not needed.</li>
|
||
|
|
<li><span class="bold">SSL w/ EXTERNAL bind</span> - Specify the subject DN for
|
||
|
|
the certificate and no password</li></ul>See <a href="rzahycreatecreds.htm#rzahycreatecreds">Create credentials</a>.</li>
|
||
|
|
<li>Click <span class="bold">OK</span>.</li>
|
||
|
|
<li>You must restart the replica for the changes to take effect.</li></ol><p class="indatacontent">See <a href="rzahymodrepprops.htm#rzahymodrepprops">Change replication properties</a> for additional information.</p>
|
||
|
|
<p>The replica is in a suspended state and no replication is occurring. After
|
||
|
|
you have finished setting up your replication topology, you must click <span class="bold">Manage queues</span>, select the replica and click <span class="bold">Suspend/resume</span> to start replication. See <a href="rzahyqueues.htm#rzahyqueues">Manage queues</a> for more detailed information. The replica now receives
|
||
|
|
updates from the master.</p>
|
||
|
|
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
|
||
|
|
</body>
|
||
|
|
</html>
|