To create a replica, you need the following permissions:
· Administer permission to the directory that you intend to replicate.
· Write permission to the clearinghouse that stores the new replica.
· For the replica creation to succeed, the server principal for the server system where you enter the directory create command with the -replica and _clearinghouse options must have read, write, and administer permissions to the directory that you intend to replicate.
If the server is included in the server authorization group subsys/dce/cds-servers, these permissions should already be in place. If in doubt, use the acl check command to verify that the server principal has the appropriate permissions. (See the acl(8dce) reference page for complete information on using the acl check command.)