Fedora directory users - Mar 2006 - Installing Fedora DS on HA cluster !

Hi,
I''m preparing to install Fedora DS on a HA cluster (only two node for
now)
Have someone any tips or recommendations ?

Thanks in advance!

Alex

> I''m preparing to install Fedora DS on a HA cluster (only two node
for now)
> Have someone any tips or recommendations ?
Typically speaking, rarely should you configure a Directory Server in
HA Clustering. Instead, install two instances, one on each machine,
and configure master-master replication.

> Typically speaking, rarely should you configure a Directory 
> Server in HA Clustering. Instead, install two instances, one 
> on each machine, and configure master-master replication.
> 


Uhm...yes you are in right, but in that case...I have to use the real
address of each node...and in this case I fall in security issue...


Regards
Alex

--- Felipe Alfaro Solana <felipe.alfaro@gmail.com> wrote:
> > I''m preparing to install Fedora DS on a HA cluster (only two
node for now)
> > Have someone any tips or recommendations ?
> 
> Typically speaking, rarely should you configure a Directory Server in
> HA Clustering. Instead, install two instances, one on each machine,
> and configure master-master replication.
the limitation of MM replication is that it doesn''t replicate FDS
settings.  So, if I change say
the password storage scheme on 1 server, I must go and change it on the other. 
If you can get a
gfs-managed shared storage, with 2 machines & an ip address takeover, it
could be a pretty good solution.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

--- Alex <magobin@gmail.com> wrote:
>  
> > Typically speaking, rarely should you configure a Directory 
> > Server in HA Clustering. Instead, install two instances, one 
> > on each machine, and configure master-master replication.
> > 
> 
> 
> 
> Uhm...yes you are in right, but in that case...I have to use the real
> address of each node...and in this case I fall in security issue...
are your FD servers on a DMZ or something?  You could setup ip takeover but
manage the database
with fedora''s MMR.  It works quite nicely and is really easy to setup,
using mmr.pl script
provided on the FDS wiki.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

> the limitation of MM replication is that it doesn''t replicate FDS
settings.
You can also replicate the o=netscape config DIT subtree, can''t you?

> are your FD servers on a DMZ or something?  You could setup 
> ip takeover but manage the database with fedora''s MMR.  It 
> works quite nicely and is really easy to setup, using mmr.pl 
> script provided on the FDS wiki.
> 

In this moment i have only a cluster (redhat Cluster suite)....there
isn''t a
DMZ...so you say to use a floating Ip (that is a rule in a cluster) and then
manage database with multi master repeplication? In this way I have to setup
two instances of fedora DS as Alvaro says.
Can you make an example or some link where to see an implementation??

Regards
Alex

Link to mmr.pl doesn''t work any more....
Susan, can you send me that script???

My email is:

Magobin  gmail   com


Thanks in advance!

Alex

--- Felipe Alfaro Solana <felipe.alfaro@gmail.com> wrote:
> > the limitation of MM replication is that it doesn''t replicate
FDS settings.
> 
> You can also replicate the o=netscape config DIT subtree, can''t
you?
that''s an interesting idea..  Have you tried that, does that work OK?

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

> > You can also replicate the o=netscape config DIT subtree,
can''t you?
>
> that''s an interesting idea..  Have you tried that, does that work
OK?
No, I haven''t tried, but I guess it should work pretty well. Has
anyone? Richard?

Felipe Alfaro Solana wrote:
>>>You can also replicate the o=netscape config DIT subtree,
can''t you?
>>>      
>>>
>>that''s an interesting idea..  Have you tried that, does that
work OK?
>>    
>>
>
>No, I haven''t tried, but I guess it should work pretty well. Has
>anyone? Richard?
>  
>
Yes, but the problem is that there is not a lot of failover built-in to 
the console.  You''ll have to manually reconfigure things if your 
o=NetscapeRoot master fails and you need to use the other master.
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>