The consumers are in a DMZ and have no direct access to the configuration server. Obviously the masters are allowed to talk to the consumers to send them replication information, but the consumers are not allowed to talk back. In all the guides they say run the perl script register-ds-admin.pl and type in the name of the configuration server. But this won't work because they aren't allowed to connect. Is there another way say can you export the configuration information to an LDIF and then import it ? Joel <div class="gmail_quote">On Fri, Jul 24, 2009 at 1:50 AM, Rich Megginson <<a href="mailto:rmeggins@redhat.com">rmeggins@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div class="im">Joel Heenan wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> I'm using Directory Server 8.1 on CentOS. I have multi-mastered servers setup in our administrative network secured and locked away working well. I have consumers setup out in other network zones and am planning to setup replication out to these servers. I wanted to keep the console as a single administration point for all the servers but I can't work out how I can register the consumers with the console given that they have no network access. Is the access needed once you have registered them? If not I could punch a quick ssh tunnel or something which would allow them to register. </blockquote></div> I don't understand - you want to remotely manage the consumer servers with the console (which uses network access) but the consumers have no network access? <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Thanks Joel ------------------------------------------------------------------------ -- 389 users mailing list <a href="mailto:389-users@redhat.com" target="_blank">389-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a> </blockquote> -- 389 users mailing list <a href="mailto:389-users@redhat.com">389-users@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a> </blockquote></div>