C Setting Up Oracle Database Advanced Replication-Based Replication

C.1.2.1 Excluded Naming Contexts

In Advanced Replication, you can only exclude naming contexts.

To exclude a naming context from replication in Oracle Database Advanced Replication-based replication, specify it using the orclexcludednamingcontext attribute of the Oracle Database Advanced Replicationn-based replication agreement entry orclagreementid=000001.

Figure C-1 and the accompanying text further exemplify the use of the naming context container and its objects.

Figure C-1 Example of a Naming Context Container and Its Objects

In Figure C-1, the naming context included for replication is c=us. Within that naming context, one subtree, namely cn=users,cn=hr, c=us is excluded from replication. Moreover, two of the attributes of the c=us naming context are excluded from replication—namely, userPassword and telephonenumber.

See Also:

"The Replication Naming Context Object Entry".

C.1.2.2 Rules for Advanced Replication Filtering.

This section describes the rules for Advanced Replication filtering.

The following naming contexts cannot be replicated:

• DSE root-specific entry

• orclagreementid=000001,cn=replication configuration

• cn=subconfigsubentry

• cn=Oracle Internet Directory

• cn=subregistrysubentry

The following naming contexts cannot be excluded from replication:

• cn=catalogs

• cn=subschemasubentry

• cn=oracleschemaversion

• cn=replication configuration

C.2.2.1 Task 1: Install Oracle Internet Directory on the Master Definition Site (MDS)

Install Oracle Internet Directory on the master definition site, as described in Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

You must be able to use Oracle Net Services to connect to the master definition site database and all other nodes in the DRG.

C.2.2.2 Task 2: Install the Oracle Internet Directory on the Remote Master Sites (RMS)

Install Oracle Internet Directory on the remote master sites, as described in Oracle Fusion Middleware Installation Guide for Oracle Identity Management

C.2.2.3 Task 3: Set Up Advanced Replication for a Directory Replication Group

The following sections lead you through installing and setting up Advanced Replication by using the Replication Management Tool.

See Also:

Oracle Database Advanced Replication in the Oracle Database Documentation Library, and the online Help for the Replication Management Tool, for information on setting up Oracle Database Advanced Replication-based replication.

To establish a directory replication group (DRG), you must configure the Advanced Replication environment by performing the tasks discussed in these topics:

• On All Nodes, Prepare the Oracle Net Services Environment for Replication

• From the MDS, Configure Advanced Replication For Directory Replication

C.2.2.4 Task 4 (Optional): Load Data into the Directory

You can choose either of two ways to load data into the directory:

• To add just a small number of entries to the DRG, you can wait until you have completely configured the DRG. Then use ldapadd to load the data to one of the nodes. The entries are then be replicated to the other nodes at the specified time.

• To add a large amount of data to load into the DRG, use the bulkload utility:

  1. Stop the LDAP server at all nodes of the DRG by typing:

     opmnctl stopproc process-type=OID
     

  2. On the node that is part of the DRG and where you have the ldif file to be loaded onto the directories, ensure that ORACLE_INSANCE is set, then enter:

     bulkload connect="connect_string" check="TRUE" \
        generate="TRUE" file="file_with_absolute_path_name"
     

     Note:

     If data is extracted from Oracle Internet Directory using ldifwrite, then, in addition to other options, use the restore="TRUE" option to restore the operational attributes.

  3. On the same node, ensure ORACLE_INSTANCE is set, then enter:

     bulkload connect="connect_string_1" load="TRUE"
     

  Repeat step c on the same node, each time replacing connect_string_1 with the connect string of another node in the DRG, until you have loaded the data onto all the nodes in the DRG. For example, enter:

  bulkload connect="connect_string_2" load="TRUE"
  

  then enter

  bulkload connect="connect_string_3" load="TRUE"
  

  and so on, until you loaded the data onto all the nodes in the DRG.

See Also:

The bulkload command-line tool reference in Oracle Fusion Middleware Reference for Oracle Identity Management for syntax and usage notes

C.2.2.5 Task 5: Ensure that Oracle Directory Server Instances are Started on All the Nodes

The out-of-box configuration has Oracle Internet Directory LDAP Server instance #1 configured with change logging set to TRUE. This default instance of Oracle Internet Directory LDAP Server can be started as follows:

opmnctl startproc process-type=OID

C.2.2.6 Task 6: Start the Replication Servers on All Nodes in the DRG

To start replication servers on all nodes, type the following command on each node:

oidctl connect=connStr server=oidrepld instance=1 componentname=oidComponentName \
 flags="-h LdapHost -p LdapPort" start

Note that the instance number need not be unique across the entire DRG.

 dn: cn=configset0,cn=osdrepld,cn=subconfigsubentry  
 changetype: modify
 replace: orclconflresolution
 orclconflresolution: 0

C.2.2.7 Task 7: Test Directory Replication

Test replication as described in

Note:

If you want to configure replication for Oracle Single Sign-On, then follow the postinstallation steps specific to Oracle Single Sign-On. These are found in the replication installation section of the Oracle Application Server Single Sign-On Administrator's Guide. in the 10g (10.1.4.0.1) library.

C.2.3.1 Prepare the Oracle Net Services Environment

"On All Nodes, Prepare the Oracle Net Services Environment for Replication" describes the process that prepares this environment.

C.2.3.2 Task 1: Stop the Directory Replication Server on All Nodes

To stop the directory replication server, run the following command on each node in the LDAP replication group:

oidctl connect=connStr server=oidrepld instance=1 componentname=oidComponentName\
 flags="-h LdapHost -p LdapPort" stop

C.2.3.3 Task 2: Identify a Sponsor Node and Install Oracle Internet Directory

You must identify a sponsor node for this Task. It is the node that supplies the data to the new node.

For the RMS, Oracle recommends that you install the new instance of Oracle Internet Directory as an Advanced Replication replica. (You could use an existing master node as the RMS, but extra manual steps are required.)

Install a new Oracle Internet Directory on the remote site.

If an existing master is used as RMS, you must follow the instructions in "If an Existing Master is Used as a Remote Master Site" to migrate the master's metadata to the sponsor node. After successfully migrating the master's metadata to the MDS, you can now safely continue with "Task 3: Switch the Sponsor Node to Read-Only Mode".

C.2.3.4 Task 3: Switch the Sponsor Node to Read-Only Mode

A sponsor node is the node that supplies the data to the new node. To switch the sponsor node from read/write to read-only mode, use one of the procedures in"Changing Server Mode"

C.2.3.5 Task 4: Back up the Sponsor Node by Using ldifwrite

Because this may take a long time, you may start "Task 5: Perform Advanced Replication Add Node Setup" while backup is in process.

On the sponsor node, verify that ORACLE_INSTANCE is set, then enter the following command:

ldifwrite connect="connect_string" \
          baseDN="orclAgreementID=000001,cn=replication configuration" \
          file="output_ldif_file"

This backs up the directory of the sponsor node.

C.2.3.6 Task 5: Perform Advanced Replication Add Node Setup

Note:

Oracle Net Service must be configured properly on all nodes for replication. See: "On All Nodes, Prepare the Oracle Net Services Environment for Replication".

You can perform the Advanced Replication add node setup at the same time that you perform "Task 4: Back up the Sponsor Node by Using ldifwrite".

On the sponsor node, enter this command:

remtool -addnode

The Replication Environment Management Tool adds the node to the DRG.

See Also:

The remtool command-line reference in Oracle Fusion Middleware Reference for Oracle Identity Management for instructions on using the -addnode option of the Replication Environment Management Tool

C.2.3.7 Task 6: Switch the Sponsor Node to Updatable Mode

To switch the sponsor node to updatable mode, use one of the procedures in "Changing Server Mode".

C.2.3.8 Task 7: Start the Directory Replication Server on All Nodes Except the New Node

To start the directory replication server, type the following command on all nodes except the new node:

oidctl connect=connStr server=oidrepld instance=1 componentname=oidComponentName \
 flags="-h LdapHost -p LdapPort" start

To ensure that no directory or replication processes are running on the new node, type:

opmnctl stopproc process-type=OID

C.2.3.9 Task 8: Load Data into the New Node by Using bulkload

To load data, ensure that ORACLE_INSTANCE is set, then type the following command on the new node:

bulkload connect="db_connect_string_of_new_node" check="TRUE" generate="TRUE" \
   load="TRUE" restore="TRUE" \
   file="absolute_path_to_the_ldif_file_generated_by_ldifwrite"

Note:

If you load data from an earlier version of Oracle Internet Directory, such as 10g Release 2 (10.1.2.0.2) onto a node running 10g (10.1.4.0.1), you must update the password policy entries as described in "Password Policy and Fan-out Replication".

C.2.3.10 Task 9: Start the Directory Server on the New Node

To start the directory server, type the following command on the new node:

opmnctl startproc process-type=OID

C.2.3.11 Task 10: Start the Directory Replication Server on the New Node

Note:

If you must change configuration or agreement parameters, see Chapter 41, "Managing and Monitoring Replication".

To start the directory replication server, type the following command on the new node:

oidctl connect=connStr server=oidrepld instance=1 componentname=oidComponentName \
 flags="-h LdapHost -p LdapPort" start

C.2.4.1 Task 1: Stop the Directory Replication Server on All Nodes

To stop the directory replication server, run the following command on each node in the DRG:

oidctl connect=connStr server=oidrepld instance=1 componentname=oidComponentName \
  flags="-h LdapHost -p LdapPort" stop

C.2.4.2 Task 2: Stop All Oracle Internet Directory Processes in the Node to be Deleted

On the node to be deleted, shut down Oracle Internet Directory.

opmnctl stopproc process-type=OID

See Also:

The opmn command-line tool reference in Oracle Fusion Middleware Reference for Oracle Identity Management for more information about shutting down Oracle Internet Directory.

C.2.4.3 Task 3: Delete the Node from the Master Definition Site

From the MDS, run the following script:

remtool -delnode

The Replication Environment Management Tool deletes the node from the replication group.

See Also:

The remtool command-line tool reference in Oracle Fusion Middleware Reference for Oracle Identity Management for instructions on using the -delnode option of the Replication Environment Management Tool

This process can take a long time, depending on your system resources and the size of your DRG. If you use the -v option, the tool keeps you informed of its progress.

C.2.4.4 Task 4: Start the Directory Replication Server on All Nodes

To start the directory replication server, type the following command on each of the remaining nodes of the DRG:

oidctl connect=connStr server=oidrepld instance=1 componentname=oidComponentName \
 flags="-h LdapHost -p LdapPort" start

See Also:

The opmn command-line tool reference in Oracle Fusion Middleware Reference for Oracle Identity Management