ipa-csreplica-manage(1) IPA Manual Pages ipa-csreplica-manage(1)

# [NAME](#NAME)

ipa-csreplica-manage - Manage an IPA CS replica

# [SYNOPSIS](#SYNOPSIS)

ipa-csreplica-manage \[*OPTION*]... \[connect|disconnect|del|list|re-initialize|force-sync]

# [DESCRIPTION](#DESCRIPTION)

Manages the CA replication agreements of an IPA server for domain at domain level 0.

To manage CA replication agreements in a domain at domain level 1, use IPA CLI or Web UI, see \`ipa help topology\` for additional information.

[**connect** \[SERVER\_A\] <SERVER\_B>](#connect)

\- Adds a new replication agreement between SERVER\_A/localhost and SERVER\_B. Applicable only at domain level 0.

[**disconnect** \[SERVER\_A\] <SERVER\_B>](#disconnect)

\- Removes a replication agreement between SERVER\_A/localhost and SERVER\_B. Applicable only at domain level 0.

[**del** <SERVER>](#del)

\- Removes all replication agreements and data about SERVER. Applicable only at domain level 0.

[**list** \[SERVER\]](#list)

\- Lists all the servers or the list of agreements of SERVER

[**re-initialize**](#re)

\- Forces a full re-initialization of the IPA CA server retrieving data from the server specified with the --from option

[**force-sync**](#force)

\- Immediately flush any data to be replicated from a server specified with the --from option

[**set-renewal-master** \[SERVER\]](#set)

\- Set CA server which handles renewal of CA subsystem certificates to SERVER

[The connect and disconnect options are used to manage the replication topology. When a replica is created it is only connected with the master that created it. The connect option may be used to connect it to other existing replicas.](#The)

[The disconnect option cannot be used to remove the last link of a replica. To remove a replica from the topology use the del option.](#The~2)

[If a replica is deleted and then re-added within a short time-frame then the 389-ds instance on the master that created it should be restarted before re-installing the replica. The master will have the old service principals cached which will cause replication to fail.](#If)

# [OPTIONS](#OPTIONS)

[**-H** *HOST*, **--host**=*HOST*](#H)

The IPA server to manage. The default is the machine on which the command is run Not honoured by the re-initialize command.

[**-p** *DM\_PASSWORD*, **--password**=*DM\_PASSWORD*](#p)

The Directory Manager password to use for authentication

[**-v**, **--verbose**](#v)

Provide additional information

[**-f**, **--force**](#f)

Ignore some types of errors

[**--from**=*SERVER*](#from)

The server to pull the data from, used by the re-initialize and force-sync commands.

# [EXAMPLES](#EXAMPLES)

[List a server's replication agreements.](#List)

\# ipa-csreplica-manage list srv1.example.com  
srv2.example.com  
srv3.example.com

[Re-initialize a replica:](#Re)

\# ipa-csreplica-manage re-initialize --from srv2.example.com

This will re-initialize the data on the server where you execute the command, retrieving the data from the srv2.example.com replica

[Add a new replication agreement:](#Add)

\# ipa-csreplica-manage connect srv2.example.com srv4.example.com

[Remove an existing replication agreement:](#Remove)

\# ipa-csreplica-manage disconnect srv1.example.com srv3.example.com

[Completely remove a replica at domain level 0:](#Completely)

\# ipa-csreplica-manage del srv4.example.com

[Completely remove a replica at domain level 1:](#Completely~2)

\# ipa-replica-manage del srv4.example.com

[Using connect/disconnect you can manage the replication topology.](#Using)

# [EXIT STATUS](#EXIT_STATUS)

0 if the command was successful

1 if an error occurred

Jul 14 2011 IPA

---

Document: ipa-csreplica-manage(1) from freeipa 4.13.4-r3 (Chainguard OS)
Source: https://pagure.io/freeipa.git