Re: replicated LDAP on IBM i using PowerHA GlobalMirror

DON'T DO IT.

Had a nice conversation with Tom Barlen about folks doing this. He gets paid a lot to undo the mess when you do your IBM i upgrade one one end which changes the structure and then blows up the other end.

Replicate within LDAP. Yes do that.


- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 7/10/2018 8:57 AM, Steve Pitcher wrote:

Getting locks on some of those files would be my main concern. But if you're shutting down then that's not an issue. I think you're covered.

And I agree with your other suggestion. Using replication within LDAP works much cleaner.


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jim Oberholtzer
Sent: Tuesday, July 10, 2018 9:29 AM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: replicated LDAP on IBM i using PowerHA GlobalMirror

V7R3M0 - PowerHA, Global Mirror, iASP


I have a customer that has a requirement to replicate the LDAP server from one IBM i instance to another. I've suggested they merely create the LDAP on the other server and treat it as a second instance but a software vendor is forcing them to replicate it instead. (why, I've no clue other than to suggest they need to understand how LDAP works, but that's another
discussion) So far I've come up with the following procedure:


Save '/QIBM/UserData/OS400/NetworkAuthentication/*'

Save '/QIBM/UserData/OS400/DirSrv/'

SAVOBJ OBJ(QGLD*) LIB(QUSRSYS)

SAVLIB LIB(QUSRDIRDB QUSRDIRCL QDIRSRV2) SAVACT(*SYNCLIB)


The restore them on the target box. This would happen about daily since there is not that much change going on for this application.


The directory server would have to be shut down during the restore, but I can handle that in a script.


Any thoughts about the method? Have I missed objects that should be included? Do you think it will work?





--

Jim Oberholtzer

Agile Technology Architects


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: http://amzn.to/2dEadiD