On 4/22/13 14:48 , "Greg Wilson" <[email protected]<mailto:[email protected]>> wrote:
Here at ASU we currently have the 3 defined authen servers know by our AFS clients all in one network subnet. We have a need to be able to split these up to several different network locations. What are the ramifications for this and how can this be done? If you're using Kerberos, it's easy to move them --- update krb5.conf if it's used, update DNS entries if needed, done. If you're using kaserver, you might want to take this time to migrate off of it; you can't separate kaserver from the other dbservers (ptserver, vlserver). Moving the dbservers requires updating both client and server CellServDB files, and DNS if you're using old AFSDB or modern SRV entries, and may pose complications (although probably not if all of them are moved at once). -- brandon s allbery kf8nh sine nomine associates [email protected] [email protected] unix, openafs, kerberos, infrastructure, xmonad http://sinenomine.net
