8장. Installing an IdM server or replica with custom Directory Server and certificate authority settings from LDIF and INI files
You can use a configuration file to install an Identity Management (IdM) server or replicas with custom settings for:
- The IdM Directory Server.
- The IdM Certificate Authority.
You can install an Identity Management (IdM) server and replicas with custom settings for the Directory Server (DS). The following procedure shows you how to create an LDAP Data Interchange Format (LDIF) file with the IdM DS settings, and how to pass those settings to the IdM server and replica installation commands.
Prerequisites
- You have determined custom Directory Server settings that improve the performance of your IdM environment. See Adjusting IdM Directory Server performance.
-
You have
rootprivileges.
Procedure
Create a text file in LDIF format with your custom DS settings. Separate LDAP attribute modifications with a dash (-). This example sets non-default values for the idle timeout and maximum file descriptors.
dn: cn=config changetype: modify replace: nsslapd-idletimeout nsslapd-idletimeout: 1800 - replace: nsslapd-maxdescriptors nsslapd-maxdescriptors: 8192Use the
--dirsrv-config-fileparameter to pass the LDIF file to the installation script.To install an IdM server:
# ipa-server-install --dirsrv-config-file <filename.ldif>To install an IdM replica:
# ipa-replica-install --dirsrv-config-file <filename.ldif>