[38474] in Kerberos
Re: Master-master deployment?
daemon@ATHENA.MIT.EDU (Yegui Cai)
Sat Feb 2 13:46:05 2019
MIME-Version: 1.0
In-Reply-To: <20190202181408.GK93251@kduck.mit.edu>
From: Yegui Cai <caiyegui@gmail.com>
Date: Sat, 2 Feb 2019 13:45:44 -0500
Message-ID: <CAJYMFR6bTZjJVYBK23xCEDwRQFLfwFaz4XRv0djZYTtV+p0Mhg@mail.gmail.com>
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Would it be possible to not leverage ldap for multiple-master deployment?
On Sat, Feb 2, 2019 at 1:14 PM Benjamin Kaduk <kaduk@mit.edu> wrote:
> Most of the instances I've heard about that use multi-master KDCs also use
> multi-master LDAP replication, to avoid the SPOF.
>
> -Ben
>
> On Sat, Feb 02, 2019 at 11:12:33AM -0500, Yegui Cai wrote:
> > Hi Thor.
> > So you have a shared ldap? If so, could that ldap be a single point of
> > failure?
> >
> > Thanks,
> > Yegui
> >
> > On Sat, Feb 2, 2019 at 11:10 AM t Seeger <tseegerkrb@gmail.com> wrote:
> >
> > > Hey Yegui,
> > >
> > > I use a mutli master setup. For the sync I use openldap.
> > >
> > > Greeting Thor
> > >
> > > On 2. Feb 2019, at 15:38, Yegui Cai <caiyegui@gmail.com> wrote:
> > >
> > > Hi all.
> > > I know the official document recommend master-slave deployment for
> > > production environment.
> > > Wonder if any try to do a master-master deployment? If yes, how could
> you
> > > sync between two masters?
> > > Thanks,
> > > Yegui
> > >
> > > ________________________________________________
> > > Kerberos mailing list Kerberos@mit.edu
> > > https://mailman.mit.edu/mailman/listinfo/kerberos
> > >
> > >
> > ________________________________________________
> > Kerberos mailing list Kerberos@mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
