Re: replicated LDAP on IBM i using PowerHA GlobalMirror

But in the future there will be an upgrade and then this becomes a landmine to step on then!

And yes in theory PTFs could also update some aspect of the LDAP database and the same problem happens.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 7/10/2018 9:12 AM, Jim Oberholtzer wrote:

Larry: Not an upgrade, both sides are V7R3M0 reasonable PTFs

Still a problem?


--
Jim Oberholtzer
Agile Technology Architects


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
DrFranken
Sent: Tuesday, July 10, 2018 8:00 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: replicated LDAP on IBM i using PowerHA GlobalMirror

DON'T DO IT.

Had a nice conversation with Tom Barlen about folks doing this. He gets paid
a lot to undo the mess when you do your IBM i upgrade one one end which
changes the structure and then blows up the other end.

Replicate within LDAP. Yes do that.


- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 7/10/2018 8:57 AM, Steve Pitcher wrote:

Getting locks on some of those files would be my main concern. But if

you're shutting down then that's not an issue. I think you're covered.

And I agree with your other suggestion. Using replication within LDAP

works much cleaner.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Jim Oberholtzer
Sent: Tuesday, July 10, 2018 9:29 AM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: replicated LDAP on IBM i using PowerHA GlobalMirror

V7R3M0 - PowerHA, Global Mirror, iASP


I have a customer that has a requirement to replicate the LDAP server from

one IBM i instance to another. I've suggested they merely create the LDAP
on the other server and treat it as a second instance but a software vendor
is forcing them to replicate it instead. (why, I've no clue other than to
suggest they need to understand how LDAP works, but that's another

discussion) So far I've come up with the following procedure:


Save '/QIBM/UserData/OS400/NetworkAuthentication/*'

Save '/QIBM/UserData/OS400/DirSrv/'

SAVOBJ OBJ(QGLD*) LIB(QUSRSYS)

SAVLIB LIB(QUSRDIRDB QUSRDIRCL QDIRSRV2) SAVACT(*SYNCLIB)


The restore them on the target box. This would happen about daily since

there is not that much change going on for this application.

The directory server would have to be shut down during the restore, but I

can handle that in a script.

Any thoughts about the method? Have I missed objects that should be

included? Do you think it will work?

--

Jim Oberholtzer

Agile Technology Architects


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a

moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related

questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link:
http://amzn.to/2dEadiD