Oracle® Identity Management User Reference
10g Release 2 (10.1.2) B15883-01 |
|
Previous |
Next |
When the Oracle Internet Directory Replication server encounters inconsistent data, you can use the Reconciliation Tool to synchronize the entries on the consumer with those on the supplier. When you do this, perform the following general steps:
Set the supplier and the consumer to read-only mode.
Ensure that the supplier and the consumer are in tranquil state. If they are not in a tranquil state, then wait until they have finished updating.
Identify the inconsistent entries or subtree on the consumer.
Use the Reconciliation Tool to fix the inconsistent entries or subtree on the consumer.
Set the participating supplier and consumer back to read/write mode.
oidreconcile -h supplier_host [-P supplier_port] -W supplier_password -c consumer_host [-p consumer_port] -w consumer_password [-s subtree] -b "basedn" [-T num_threads]
-h supplier_host
Required. The host name or IP address of the supplier host (the host where the replication data originates).
-P supplier_port
Optional. The port number used to connect to the Oracle Internet Directory supplier server. Defaults to port 389.
-W supplier_password
Required. The password of the replication DN of the supplier node.
-c consumer_host
Required. The host name or IP address of the consumer host (the host where the replication data is being sent).
-p consumer_port
Optional. The port number used to connect to the Oracle Internet Directory consumer server. Defaults to port 389.
-w consumer_password
Required. The password of the replication DN of the consumer node.
-s subtree
The scope for the reconciliation. The only option is subtree
(base
or one-level
are not allowed for this operation).
-b "basedn"
The DN of an entry on which to perform reconciliation.
-T num_threads
Optional. The number of worker threads. The default value is 1.
Using the oidreconcile
command-line tool, you can perform the following tasks:
To reconcile a replication conflict for a single entry, supply the DN of the entry.
For example, the following command, replaces only the specified entry, "ou=hr,o=acme,c=us"
.
Example:
oidreconcile -h supplier -P 389 -c consumer -p 389 -b "ou=hr, o=acme, c=us" \ -W supplier_password -w consumer_password
To reconcile a replication conflict for a subtree, supply the base DN of the subtree along with the -s subtree
argument. The Reconciliation tool compares the global identifier (orclGuid
) of the parent DN on both the supplier and the consumer. If the global identifiers of both parent DNs match, the Reconciliation Tool deletes all entries in the subtree of the consumer node and replaces them with those from the supplier node.
The following command replaces the whole subtree starting from "ou=hr,o=acme,c=us"
on the consumer with the equivalent subtree on the supplier, as long as the global identifier of the parent DN, "o=acme,c=us"
, matches.
If the global identifier (orclGuid
) of the parent DNs do not match, then the Reconciliation Tool will not perform the reconciliation. Instead it will inform you of the first ancestor on the consumer where the global identifier matches an ancestor on the supplier. This is the base DN you should use to reconcile the entries in the subtree.
Example:
oidreconcile -h supplier_host -P 389 -c consumer_host -p 389 \ -b "ou=hr,o=acme,c=us" -s subtree -W supplier_password \ -w consumer_password