When setting up replication, I understand that you : a) create a dn on the consumer to be used as the 'bind-dn' for the replica on the consumer; b) create a replication agreement on the supplier, in which you reference the bind dn from a). I have a couple questions about this: 1) How do you generate the hash used in the nsDS5ReplicaCredentials attribute of the supplier's replication agreement? I understand that the 389-ds-console will generate it for you, but I don't want to use the console. 2) Why is the hash recorded in the nsDS5ReplicaCredentials attribute of the supplier's replication agreement {DES} differently than the hash recorded in the person objectClass {SSHA} on the consumer for the dn? 3) How does the supplier authenticate to the consumer when replicating? Does it pass the binddn credentials? If so, in what format? How are they validated? Thanks, Jon -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users