[Fedora-directory-users] Multiple masters and Round Robin DNS

[Doug Chapman]

After setting up 2 servers with multi-master replication, I added them both
to a DNS record so users will go to either server.

Both servers are replicating the NetscapeRoot DB to each other.  I made a
schema change to one and restarted it- only to see it hang.  I waited some
15minutes, and then discovered with netstat that it had a bunch of open ldap
connections to itself, which weren't timing out or going away.

After I removed the IP from DNS (disabled round robin dns) for the server I
was trying to shutdown , the server shutdown right away.

I'm guessing somewhere there's a configuration that needs to be pointed to
the other master server?

How are others doing load balancing/fail over ?


tia

[Edward Capriolo]

I am fairly sure you can not replicate the Netscape Root DB. It has
information inside it that is specific to the installation of that
server. I would suggest you create another tree for your data and
replicate that.

On Fri, Feb 15, 2008 at 2:50 PM, Doug Chapman <prjctgeek(a)gmail.com&gt; wrote:
>  After setting up 2 servers with multi-master replication, I added
> them both
>  to a DNS record so users will go to either server.
>
>  Both servers are replicating the NetscapeRoot DB to each other.  I made a
>  schema change to one and restarted it- only to see it hang.  I waited some
>  15minutes, and then discovered with netstat that it had a bunch of open ldap
>  connections to itself, which weren't timing out or going away.
>
>  After I removed the IP from DNS (disabled round robin dns) for the server I
>  was trying to shutdown , the server shutdown right away.
>
>  I'm guessing somewhere there's a configuration that needs to be pointed to
>  the other master server?
>
>  How are others doing load balancing/fail over ?
>
>
>  tia
>
>  --
>   Fedora-directory-users mailing list
>   Fedora-directory-users(a)redhat.com
>   https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

[Ivan Ferreira]

You can replicate o=netscaperoot.


Managing Console Failover
If you have a multi-master installation with o=NetscapeRoot replicated
between
your two suppliers, server1 and server2, you can modify the Console on the
second server (server2) so that it uses server2’s instance instead of
server1’s. (By
default, writes with server2’s Console would be made to server1 then
replicated
over.)




                                                                           
                                                                           
                                                                           
                                                                      Para 
                                          "General discussion list for the 
                                          Fedora Directory server          
       "Eddie C"                          project."                       

       <edlinuxguru(a)gmail.com&gt;            <fedora-directory-users(a)redhat.c 
       Enviado por:                       om>                              
       fedora-directory-users-b                                         cc 
       ounces(a)redhat.com                                                   
                                                                    Asunto 
       15/02/2008 04:57 p.m.              Re: [Fedora-directory-users]     
                                          Multiple masters and Round Robin 
                                          DNS                              
                                                             Clasificación 
        Por favor, responda a            Uso Interno                       
       "General discussion list                                            
       for the Fedora Directory                                            
           server project."                                                
       <fedora-directory-users@                                            
             redhat.com>                                                   
                                                                           
                                                                           




I am fairly sure you can not replicate the Netscape Root DB. It has
information inside it that is specific to the installation of that
server. I would suggest you create another tree for your data and
replicate that.

On Fri, Feb 15, 2008 at 2:50 PM, Doug Chapman <prjctgeek(a)gmail.com&gt; wrote:
>  After setting up 2 servers with multi-master replication, I added
> them 
both
>  to a DNS record so users will go to either server.
>
>  Both servers are replicating the NetscapeRoot DB to each other.  I made a
>  schema change to one and restarted it- only to see it hang.  I waited 
some
>  15minutes, and then discovered with netstat that it had a bunch of
> open 
ldap
>  connections to itself, which weren't timing out or going away.
>
>  After I removed the IP from DNS (disabled round robin dns) for the server 
I
>  was trying to shutdown , the server shutdown right away.
>
>  I'm guessing somewhere there's a configuration that needs to be pointed 
to
>  the other master server?
>
>  How are others doing load balancing/fail over ?
>
>
>  tia
>
>  --
>   Fedora-directory-users mailing list
>   Fedora-directory-users(a)redhat.com
>   https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>  
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users


========================================================================================
AVISO LEGAL: Esta información es privada y confidencial y está dirigida
únicamente a su destinatario. Si usted no es el destinatario original de
este mensaje y por este medio pudo  acceder a dicha información por favor
elimine el mensaje. La distribución o copia de este mensaje está
estrictamente prohibida. Esta comunicación es sólo para  propósitos de
información y no debe ser considerada como propuesta, aceptación ni como
una declaración de voluntad oficial de NUCLEO S.A.  La transmisión de
e-mails no garantiza que el correo electrónico sea seguro o libre de error.
Por consiguiente, no manifestamos que esta información sea completa o
precisa.  Toda información está sujeta a alterarse sin previo aviso.

 This information is private and confidential and intended for the
recipient only. If you are not the intended recipient of this message you
are hereby notified that any review,  dissemination, distribution or
copying of this message is strictly prohibited. This communication is for
information purposes only and shall not be regarded neither as a proposal,
acceptance nor as a statement of will or official statement from NUCLEO
S.A. . Email transmission cannot be guaranteed to be secure or error-free.
Therefore,  we do not represent that this information is complete or
accurate and it should not be relied upon as such. All information is
subject to change without notice.

[Rich Megginson]

Ivan Ferreira wrote:
>  You can replicate o=netscaperoot.
>
>
>  Managing Console Failover
>  If you have a multi-master installation with o=NetscapeRoot replicated
>  between
>  your two suppliers, server1 and server2, you can modify the Console on the
>  second server (server2) so that it uses server2’s instance instead of
>  server1’s. (By
>  default, writes with server2’s Console would be made to server1 then
>  replicated
>  over.)
>     
See 
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Replication...

That's "ADS" meaning "A Directory Server" not "Active
Directory Server" :P
>                                                                             
>                                                                             
>                                                                             
>                                                                        Para 
>                                            "General discussion list for the 
>                                            Fedora Directory server          
>         "Eddie C"                          project."                       
>
>         <edlinuxguru(a)gmail.com&gt;            <fedora-directory-users(a)redhat.c 
>         Enviado por:                       om>                              
>         fedora-directory-users-b                                         cc 
>         ounces(a)redhat.com                                                   
>                                                                      Asunto 
>         15/02/2008 04:57 p.m.              Re: [Fedora-directory-users]     
>                                            Multiple masters and Round Robin 
>                                            DNS                              
>                                                               Clasificación 
>          Por favor, responda a            Uso Interno                       
>         "General discussion list                                            
>         for the Fedora Directory                                            
>             server project."                                                
>         <fedora-directory-users@                                            
>               redhat.com>                                                   
>                                                                             
>                                                                             
>
>
>
>
>  I am fairly sure you can not replicate the Netscape Root DB. It has
>  information inside it that is specific to the installation of that
>  server. I would suggest you create another tree for your data and
>  replicate that.
>
>  On Fri, Feb 15, 2008 at 2:50 PM, Doug Chapman <prjctgeek(a)gmail.com&gt; wrote:
>    
> > After setting up 2 servers with multi-master replication, I added them
> >     
>  both
>    
> > to a DNS record so users will go to either server.
> >
> > Both servers are replicating the NetscapeRoot DB to each other.  I made a
> > schema change to one and restarted it- only to see it hang.  I waited
> >     
>  some
>    
> > 15minutes, and then discovered with netstat that it had a bunch of open
> >     
>  ldap
>    
> > connections to itself, which weren't timing out or going away.
> >
> > After I removed the IP from DNS (disabled round robin dns) for the server
> >     
>  I
>    
> > was trying to shutdown , the server shutdown right away.
> >
> > I'm guessing somewhere there's a configuration that needs to be pointed
> >     
>  to
>    
> > the other master server?
> >
> > How are others doing load balancing/fail over ?
> >
> >
> > tia
> >
> > --
> >  Fedora-directory-users mailing list
> >  Fedora-directory-users(a)redhat.com
> >  https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
> >     
>
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
>  ========================================================================================
>  AVISO LEGAL: Esta información es privada y confidencial y está dirigida
>  únicamente a su destinatario. Si usted no es el destinatario original de
>  este mensaje y por este medio pudo  acceder a dicha información por favor
>  elimine el mensaje. La distribución o copia de este mensaje está
>  estrictamente prohibida. Esta comunicación es sólo para  propósitos de
>  información y no debe ser considerada como propuesta, aceptación ni como
>  una declaración de voluntad oficial de NUCLEO S.A.  La transmisión de
>  e-mails no garantiza que el correo electrónico sea seguro o libre de error.
>  Por consiguiente, no manifestamos que esta información sea completa o
>  precisa.  Toda información está sujeta a alterarse sin previo aviso.
>
>   This information is private and confidential and intended for the
>  recipient only. If you are not the intended recipient of this message you
>  are hereby notified that any review,  dissemination, distribution or
>  copying of this message is strictly prohibited. This communication is for
>  information purposes only and shall not be regarded neither as a proposal,
>  acceptance nor as a statement of will or official statement from NUCLEO
>  S.A. . Email transmission cannot be guaranteed to be secure or error-free.
>  Therefore,  we do not represent that this information is complete or
>  accurate and it should not be relied upon as such. All information is
>  subject to change without notice.
>
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

[Ivan Ferreira]

Failover is done through the client configuration file, as you can define
multiple ldap servers.

How did you configured your Resource Records?

Try adding one for each hostname->ip, and another for DNS round robin. You
may have some problems with certificates if you use SSL.




                                                                           
                                                                           
                                                                           
                                                                      Para 
                                          fedora-directory-users(a)redhat.co 
                                          m                                
       "Doug Chapman"                                                   cc 
       <prjctgeek(a)gmail.com&gt;                                               
       Enviado por:                                                 Asunto 
       fedora-directory-users-b           [Fedora-directory-users]         
       ounces(a)redhat.com                  Multiple masters and Round Robin 
                                          DNS                              
       15/02/2008 04:50 p.m.                                 Clasificación 
                                         Uso Interno                       
                                                                           
                                                                           
        Por favor, responda a                                              
       "General discussion list                                            
       for the Fedora Directory                                            
           server project."                                                
       <fedora-directory-users@                                            
             redhat.com>                                                   
                                                                           
                                                                           




After setting up 2 servers with multi-master replication, I added them both
to a DNS record so users will go to either server.

Both servers are replicating the NetscapeRoot DB to each other.  I made a
schema change to one and restarted it- only to see it hang.  I waited some
15minutes, and then discovered with netstat that it had a bunch of open
ldap connections to itself, which weren't timing out or going away.

After I removed the IP from DNS (disabled round robin dns) for the server I
was trying to shutdown , the server shutdown right away.

I'm guessing somewhere there's a configuration that needs to be pointed to
the other master server?

How are others doing load balancing/fail over ?


tia--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users


========================================================================================
AVISO LEGAL: Esta información es privada y confidencial y está dirigida
únicamente a su destinatario. Si usted no es el destinatario original de
este mensaje y por este medio pudo  acceder a dicha información por favor
elimine el mensaje. La distribución o copia de este mensaje está
estrictamente prohibida. Esta comunicación es sólo para  propósitos de
información y no debe ser considerada como propuesta, aceptación ni como
una declaración de voluntad oficial de NUCLEO S.A.  La transmisión de
e-mails no garantiza que el correo electrónico sea seguro o libre de error.
Por consiguiente, no manifestamos que esta información sea completa o
precisa.  Toda información está sujeta a alterarse sin previo aviso.

 This information is private and confidential and intended for the
recipient only. If you are not the intended recipient of this message you
are hereby notified that any review,  dissemination, distribution or
copying of this message is strictly prohibited. This communication is for
information purposes only and shall not be regarded neither as a proposal,
acceptance nor as a statement of will or official statement from NUCLEO
S.A. . Email transmission cannot be guaranteed to be secure or error-free.
Therefore,  we do not represent that this information is complete or
accurate and it should not be relied upon as such. All information is
subject to change without notice.