It may be an admin burden, but it has to be optional. There are other ways to achieve global sync (e.g., LDAP/AD/Oauth). A lot of service providers who run cloudstack have their own user database / portal. In their implementations the CloudStack database is not the master source of user records, but a slave.
On 11/5/13 12:41 PM, "Chip Childers" <chipchild...@apache.org> wrote: >Alex, > >I've moved your page to the "Designs not committed to a release" >parent (instead of the 4.3 designs page), to align with both the Jira >record *and* the fact that feature freeze is about to happen for 4.3. > >As for the proposal itself, I have a couple of suggestions: > >1) I'd like to see the implementation be part of the ACS runtime. >Having a separate python app for this sync feature seems like an admin >burden. > >2) As far as the design document itself, I think that we need to see >more details on the proposed approach to sync, failure condition >handling, etc... > >-chip > > >On Mon, Nov 4, 2013 at 3:16 PM, Alex Ough <alex.o...@sungard.com> wrote: >> All, >> >> Among the 2 approaches, I uploaded the implemented codes of the first >> approach, master-slave architecture, here. >> https://github.com/alexoughsg/albatross >> >> And here is the design doc in the wiki. >> >>https://cwiki.apache.org/confluence/display/CLOUDSTACK/Domain-Account-Use >>r+Sync+Up+Among+Multiple+Regions >> >> Please review them and let me know what you think if you're interested! >> Thanks >> Alex Ough >> >> >> >> On Thu, Oct 31, 2013 at 6:51 PM, Alex Ough <alex.o...@sungard.com> >>wrote: >> >>> Great! Thanks a lot, Daan. >>> >>> >>> On Thu, Oct 31, 2013 at 4:58 PM, Daan Hoogland >>><daan.hoogl...@gmail.com>wrote: >>> >>>> you are added to jira, Alex >>>> >>>> On Thu, Oct 31, 2013 at 8:31 PM, Alex Ough <alex.o...@sungard.com> >>>>wrote: >>>> > Thanks Chip, and can you also give a permission in Jira so that I >>>>can >>>> > assign myself in its jira? >>>> > >>>> > Alex Ough >>>> > >>>> > >>>> > On Thu, Oct 31, 2013 at 2:00 PM, Chip Childers >>>><chipchild...@apache.org >>>> >wrote: >>>> > >>>> >> Permission added. >>>> >> >>>> >> On Wed, Oct 30, 2013 at 12:19:23PM -0500, Alex Ough wrote: >>>> >> > And I'd like to write the design document in the wiki page, but I >>>> don't >>>> >> > seem to have a permission to create pages. >>>> >> > So can anyone give me the permission? >>>> >> > >>>> >> > My account in the wiki is alex.o...@sungard.com >>>> >> > >>>> >> > Thanks in advance. >>>> >> > Alex Ough >>>> >> > >>>> >> > >>>> >> > On Tue, Oct 29, 2013 at 3:38 PM, Alex Ough >>>><alex.o...@sungard.com> >>>> >> wrote: >>>> >> > >>>> >> > > I created a jira for this feature. >>>> >> > > >>>> >> > > https://issues.apache.org/jira/browse/CLOUDSTACK-4992 >>>> >> > > >>>> >> > > But it doesn't allow for me to assign it to myself, so any >>>> permission >>>> >> do I >>>> >> > > need for this? >>>> >> > > If so, can anyone give me this permission? >>>> >> > > >>>> >> > > If there is anything missing, let me know. >>>> >> > > Thanks >>>> >> > > Alex Ough >>>> >> > > >>>> >> > > >>>> >> > > On Fri, Oct 18, 2013 at 9:30 AM, Kishan Kavala < >>>> >> kishan.kav...@citrix.com>wrote: >>>> >> > > >>>> >> > >> > -----Original Message----- >>>> >> > >> > From: Alex Ough [mailto:alex.o...@sungard.com] >>>> >> > >> > Sent: Thursday, 17 October 2013 11:25 PM >>>> >> > >> > To: dev@cloudstack.apache.org; u...@cloudstack.apache.org >>>> >> > >> > Subject: Fwd: [DISCUSS] Domain/Account/User Sync Up Among >>>> Multiple >>>> >> > >> > Regions >>>> >> > >> > >>>> >> > >> > All, >>>> >> > >> > >>>> >> > >> > Currently, under the environment of cloudstack with multiple >>>> >> regions, >>>> >> > >> each >>>> >> > >> > region has its own management server running with a separate >>>> >> database. >>>> >> > >> So if >>>> >> > >> > we want to support multiple regions and provide one point of >>>> entry >>>> >> for a >>>> >> > >> > customer, we need to duplicate domain/account/user >>>>information >>>> of >>>> >> that >>>> >> > >> > customer to all of the databases of regions the customer >>>> accesses, >>>> >> > >> which will >>>> >> > >> > cause data discrepancies when users update those data >>>> independently >>>> >> in >>>> >> > >> each >>>> >> > >> > management server. >>>> >> > >> > >>>> >> > >> > So I'd like to provide a way to sync up the data using the >>>> messaging >>>> >> > >> system >>>> >> > >> > introduced in 4.1.0. Using the events from each management >>>> server, >>>> >> > >> updates >>>> >> > >> > from each region can be propagated to the rest regions and >>>>they >>>> can >>>> >> be >>>> >> > >> > executed accordingly. >>>> >> > >> > >>>> >> > >> > I hope you guys have a chance to think about this and give >>>>some >>>> >> > >> feedbacks if >>>> >> > >> > interested. >>>> >> > >> > Thanks in advance. >>>> >> > >> > Alex Ough >>>> >> > >> >>>> >> > >> [KK] Alex, it was discussed sometime back. Related thread [1]. >>>> Sync up >>>> >> > >> using messaging system is the right way to go. >>>> >> > >> >>>> >> > >> >>>> >> > >> [1] >>>> >> > >> >>>> >> >>>> >>>>http://www.mail-archive.com/cloudstack-dev@incubator.apache.org/msg2019 >>>>3.html >>>> >> > >> >>>> >> > >> >>>> >> > > >>>> >> >>>> >> >>>> >>>> >>>
