Fedora directory users - Apr 2007 - I have 2 masters in MM mode- how do I add a 3rd and 4th?

Currently, I have 2 FDS in production in Multimaster mode. I want to
bring 2 more up as well and put them at a remote site so eventually they
will replicate via WAN. Then I will have 2 sets of my data- one at each
location.

So I plan to bring up 2 new servers in MMR mode with the first 2
servers. Once they are synced up I would then move the new ones to the
remote site and use SSH tunnels to re-establish the replication
connection.

Can someone chime in on the viability of this?

Is this possible?

What are the steps? I have looked and have not found anything yet.

Any help appreciated.

Thanks,
Dave

> Currently, I have 2 FDS in production in Multimaster mode. I 
> want to bring 2 more up as well and put them at a remote site 
> so eventually they will replicate via WAN. Then I will have 2 
> sets of my data- one at each location.
> 
> So I plan to bring up 2 new servers in MMR mode with the 
> first 2 servers. Once they are synced up I would then move 
> the new ones to the remote site and use SSH tunnels to 
> re-establish the replication connection.
> 
> Can someone chime in on the viability of this?
> 
> Is this possible?
> 
> What are the steps? I have looked and have not found anything yet.
I''d highly recommend against doing it this way.  The extra
complications
added by setting them up and them moving them probably just isn''t worth
the effort vs. setting them up the way they''ll be used from the
beginning. Unless your LDAP repo is obscenely large, chances are you
won''t save much time setting them up locally, either. If I were to go
further I''d say you''re asking for trouble trying to keep them
synched
over SSH tunnels, given the low reliability you''ll have on
connectivity.

If it were me (and it has been several times) I''d just set up the
servers as usual, in the places where they''ll be used, and then use
something a bit more reliable (or at least fault-tolerant) as a
connectivity method, such as stunnel.  Then the only thing you need to
do differently is set up replication on the providers to a local IP
address, and otherwsie it''s the same as a standard setup.

I once tried to tunnel and LDAP connection over SSH. I needed this because
my admin server on public internet  was attempting to redirect me to an
internal IP address. Technically it should work but I could not make it.

One of the issues, that may come up for you, is that the replication
agreements are going to be awkward because of tunnel names. localhost:389
etc.

I would suggest going the VPN route or just replicating over LDAPS. Same
result more logical setup.

Edward



On 4/30/07, Dave Augustus <davea@support.kcm.org>
wrote:
>
> Currently, I have 2 FDS in production in Multimaster mode. I want to
> bring 2 more up as well and put them at a remote site so eventually they
> will replicate via WAN. Then I will have 2 sets of my data- one at each
> location.
>
> So I plan to bring up 2 new servers in MMR mode with the first 2
> servers. Once they are synced up I would then move the new ones to the
> remote site and use SSH tunnels to re-establish the replication
> connection.
>
> Can someone chime in on the viability of this?
>
> Is this possible?
>
> What are the steps? I have looked and have not found anything yet.
>
> Any help appreciated.
>
> Thanks,
> Dave
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

ok, so is there a way to bring a fresh install of FDS into sync with an
existing server?

> ok, so is there a way to bring a fresh install of FDS into 
> sync with an existing server?
Sure. Set up a replication agreement and initialize the consumer.

That''s too easy!

This will also make the new one a master as well ?

TIA
Dave

On Mon, 2007-04-30 at 16:38 -0400, Morris, Patrick
wrote:
> > ok, so is there a way to bring a fresh install of FDS into 
> > sync with an existing server?
> 
> Sure. Set up a replication agreement and initialize the consumer.
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

> From: fedora-directory-users-bounces@redhat.com 
> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf 
> Of Dave Augustus
> Sent: Monday, April 30, 2007 1:46 PM
> To: General discussion list for the Fedora Directory server project.
> Subject: RE: [Fedora-directory-users] I have 2 masters in MM 
> mode- how doIadd a 3rd and 4th?
> 
> That''s too easy!
> 
> This will also make the new one a master as well ?
> 
> TIA
> Dave
> 
> On Mon, 2007-04-30 at 16:38 -0400, Morris, Patrick wrote:
> > > ok, so is there a way to bring a fresh install of FDS 
> into sync with 
> > > an existing server?
> > 
> > Sure. Set up a replication agreement and initialize the consumer.
You''ll need to configure the server as a master, but yes, the sync
process is the same.

On Mon, Apr 30, 2007 at 04:03:21PM -0400, Eddie C wrote:
> I once tried to tunnel and LDAP connection over SSH. I needed this because
> my admin server on public internet  was attempting to redirect me to an
> internal IP address. Technically it should work but I could not make it.
> 
> One of the issues, that may come up for you, is that the replication
> agreements are going to be awkward because of tunnel names. localhost:389
> etc.
One way to overcome this is to put entries for your peers in /etc/hosts.
> I would suggest going the VPN route or just replicating over LDAPS. Same
> result more logical setup.
Agreed.
> Edward
> 
> 
> 
> On 4/30/07, Dave Augustus <davea@support.kcm.org> wrote:
> >
> >Currently, I have 2 FDS in production in Multimaster mode. I want to
> >bring 2 more up as well and put them at a remote site so eventually
they
> >will replicate via WAN. Then I will have 2 sets of my data- one at each
> >location.
> >
> >So I plan to bring up 2 new servers in MMR mode with the first 2
> >servers. Once they are synced up I would then move the new ones to the
> >remote site and use SSH tunnels to re-establish the replication
> >connection.
> >
> >Can someone chime in on the viability of this?
> >
> >Is this possible?
> >
> >What are the steps? I have looked and have not found anything yet.
> >
> >Any help appreciated.
> >
> >Thanks,
> >Dave
> >
> >--
> >Fedora-directory-users mailing list
> >Fedora-directory-users@redhat.com
> >https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

-- 
Jonathan Barber
High Performance Computing Analyst
Tel. +44 (0) 1382 386389