The create-initial-proxy-config tool can be used to initially configure the Directory Server. We strongly recommend that you use the create-initial-proxy-config tool for your initial Directory Server configuration. This tool prompts you for basic information about your topology, including external servers, their locations, and credentials for communicating with them. Once the configuration is complete, the tool writes the configuration to a dsconfig batch file and allows you to apply the configuration to the local Directory Server. The tool assumes the following about your topology:
  • All servers are accessible through a single user account. This user account must be a root user that is not generally accessible to clients to avoid inadvertent changes, deletions, or backend server availability issues due to reimporting data.

  • All servers support the same type of communication security.

  • All external servers are any combination of Ping Identity Directory Server, Sun Directory Server, or Red Hat (including Fedora and 389) instances.

If your topology does have these characteristics, you can use the tool to define a basic configuration that is saved to a dsconfig batch file. You can then run the dsconfig tool to fine-tune the configuration. You can also use this tool to configure an entry balancing configuration, which allows you to automatically spread entries below a common parent among multiple sets of directory servers for improved scalability and performance.

The create-initial-proxy-config tool produces a log file called create-initial-proxy-config.log that is stored in the local Directory Proxy Server’s logs directory.

You can only run the create-initial-proxy-config tool once for the initial configuration of each Directory Proxy Server instance. To tune your configuration, use the dsconfig tool. When installing a second Directory Proxy Server, it will not be necessary to run the create-initial-proxy-config tool again, as the Directory Proxy Server setup has the ability to clone the settings from an existing Directory Proxy Server.

This section describes how to use this tool to configure a standard Directory Proxy Server deployment as well as an entry balancing configuration.