Hi,
Thanks for the suggestion.
To sum it up,
1) run utconfig, answer YES to FOG & use different FOG password / sig.
2) run utreplica on primary and add the new server as a new secondary
member
3) run utreplica on new secondary and add the primary server
The limitation that you mention is actually useful to me. If I were to cold
restart the central servers, the remote server will not be affected.
Thereby achieving stand-alone status while keeping the LDAP in sync.
BR,
Alan
ottomeister
<[EMAIL PROTECTED]
l.com> To
Sent by: "SunRay-Users mailing list"
sunray-users-boun <[email protected]>
[EMAIL PROTECTED] cc
Subject
05/04/2008 12:11 Re: [SunRay-Users] Sharing Sunray
user database
Please respond to
SunRay-Users
mailing list
<[EMAIL PROTECTED]
ibeto.org>
On Fri, Apr 4, 2008 at 1:18 AM, <[EMAIL PROTECTED]> wrote:
> I have 3 servers now in a FOG. I want to add another sunray server to a
> remote office.
> I want the new server to share the user database so that user creation
is
> centralised.
> However, I don't want my Sunrays to failover or load-balanced to the
remote
> site.
>
> Can I do that?
It's not a supported configuration, but you can do it if you want.
Just give the new server a different group signature when 'utconfig'
asks for it, then use utreplica the same way you'd do it if the servers
were in the same group.
One thing you need to remember is that if you make changes that
require an SRSS restart (for instance, a major access policy change
like turning on NSCM) you'll have to do that separately for the remote
system. It won't be a member of the group, therefore a group-wide
restart from the web GUI won't affect it. If you add or delete multihead
group definitions those won't be automatically detected either, you'll
need to do a warm restart at the remote site (whichever site didn't run
the 'utmhadm' command) to have it start using the new definition.
There was a similar discussion on the list almost exactly a year ago.
That's in the thread at
<http://www.filibeto.org/pipermail/sunray-users/2007-April/006306.html>.
In that case Trevor was going to give all of the servers the same group
signature and was depending on the network to prevent the servers
from seeing each other and joining up into one large group. You
could do it that way too. The main difference is that if the servers have
the same signature then the admins at one site can (although this is
undocumented and unsupported) use the 'utrcmd' tool to perform some
SRSS administrative operations on the other site's machines. I'd
probably give them different group signatures in order to disallow
'utrcmd', and require the admins log in over 'ssh' if they needed to
manage the machines at the other site.
OttoM.
__
ottomeister
Disclaimer: These are my opinions. I do not speak for my employer.
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
***************************************************************************
IMPORTANT NOTICE:
This email and any files transmitted with it is intended only for
the use of the person(s) to whom it is addressed, and may
contain information that is privileged, confidential and exempt
from disclosure under applicable law. If you are not the intended
recipient, please immediately notify the sender and delete
the email. Thank you.
***************************************************************************
********************************************************************************
IMPORTANT NOTICE: This email and any files transmitted with it is
intended only for the use of the person(s) to whom it is addressed, and
may contain information that is privileged, confidential and exempt from
disclosure under applicable law. If you are not the intended recipient,
please immediately notify the sender and delete the email. Thank you.
********************************************************************************
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
