Show Table of Contents
6.3. Command Line: Managing Topology Using the ipa topology* Commands
6.3.1. Getting Help for Topology Management Commands
To display all commands used to manage replication topology:
$ ipa help topology
To display detailed help for a particular command, run it with the
--help option:
$ ipa topologysuffix-show --help
6.3.2. Setting up Replication Between Two Servers
- Use the
ipa topologysegment-addcommand to create a topology segment for the two servers. When prompted, provide:- the required topology suffix:
domainorcaNote
If you want to create a segment betweencasuffixes, both servers must have a CA installed. See Section 26.8, “Installing a CA Into an Existing IdM Domain”. - the left node and the right node, representing the two servers
- optionally, a custom name for the segment
For example:$ ipa topologysegment-add Suffix name: domain Left node: server1.example.com Right node: server2.example.com Segment name [server1.example.com-to-server2.example.com]: new_segment --------------------------- Added segment "new_segment" --------------------------- Segment name: new_segment Left node: server1.example.com Right node: server2.example.com Connectivity: both
Adding the new segment joins the servers in a replication agreement. - Optional. Use the
ipa topologysegment-showcommand to verify that the new segment is configured.$ ipa topologysegment-show Suffix name: domain Segment name: new_segment Segment name: new_segment Left node: server1.example.com Right node: server2.example.com Connectivity: both
6.3.3. Stopping Replication Between Two Servers
- To stop replication, you must delete the corresponding replication segment between the servers. To do that, you need to know the segment name.If you do not know the name, use the
ipa topologysegment-findcommand to display all segments, and locate the required segment in the output. When prompted, provide the required topology suffix:domainorca. For example:$ ipa topologysegment-find Suffix name: domain ------------------ 8 segments matched ------------------ Segment name: new_segment Left node: server1.example.com Right node: server2.example.com Connectivity: both ... ---------------------------- Number of entries returned 8 ---------------------------- - Use the
ipa topologysegment-delcommand to remove the topology segment joining the two servers.$ ipa topologysegment-del Suffix name: domain Segment name: new_segment ----------------------------- Deleted segment "new_segment" -----------------------------
Deleting the segment removes the replication agreement. - Optional. Use the
ipa topologysegment-findcommand to verify that the segment is no longer listed.$ ipa topologysegment-find Suffix name: domain ------------------ 7 segments matched ------------------ Segment name: server2.example.com-to-server3.example.com Left node: server2.example.com Right node: server3.example.com Connectivity: both ... ---------------------------- Number of entries returned 7 ----------------------------

Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.