DS 6.0 - Multi Master replication over SSL

Hello,

Any got replication workin over SSL. I've tried both DSCC and command line, but it fails over SSL. I am able to get replication configured over non-secure LDAP port.

I've exchanged CA certs between the two master servers involved. The admin guide on page 251 lists the following command.

dsconf create-repl-agmt -h example1.server -p 1389 -e -i \

--auth-protocol "ssl-simple" dc=example,dc=com example2.server:2636

$ dsconf create-repl-agmt -h example2.server -p 2389 -e -i \

--auth-protocol "ssl-simple" dc=example,dc=com example1.server:1636

I believe "-e" option stands for non secure. When I run the above commands, dsconf complains that --auth-protocol is not a valid option.

Usinf DSCC, I am able to create the replication agreement using simple SSL. When I try to initialize the suffixes, I get a bind error. I am using the built in "replication manager" account to bind.

Thanks for your help and input.

[980 byte] By [snowdoga] at [2007-11-27 7:36:16]
# 1

It took me a while to figure it out myself, but if you do what is in the documentation(Replicating Over SSL) to a T(not through DSCC), that is how I got it to work. You also have to make sure that you have valid certs, and that they are both added to each box, and trusted. I think that was where I had the most problem. The other thing I ran into, is that you have to keep the case sensitivity with the server names when you register them.

It works, but it's a little bit of a pain.

UNO-AD-HMa at 2007-7-12 19:16:46 > top of Java-index,Web & Directory Servers,Directory Servers...