Hi Louis,
That looks just the ticket actually. I wasn't aware that I could have it
running like that.
The only things that stand out for the way I currently have it setup are:
The hostnames in the pf.conf are currently different. Can I just set this to
the HA hostname on both servers without causing any issues?
The IP addresses for the registration and isolation networks are obviously
different for both servers, can I set them both to have a HA address in
pf.conf, as I have for the management address?
Other than those two things I imagine that this will sync via cron pretty
easily and make the whole setup process much more efficient.
Thanks!
Cheers,
Andi
From: Louis Munro [mailto:[email protected]]
Sent: 02 May 2014 14:53
To: [email protected]
Subject: Re: [PacketFence-users] Change web interface admin password via CLI
Hi Andy,
As you have discovered, the passwords are held in the database. So there should
be no reason for you to set them on both servers when in HA configuration.
There should also be no need to log on to the second server. Assuming you are
running an active-passive configuration with DRBD replicating the database (are
you not?) , the database will not be running on the second server. As such,
most PacketFence services will not work or will be degraded.
What you really need is to set-up some way for the /usr/local/pf directory to
be replicated between servers.
There are sophisticated options for that around but most people will find that
a simple cron job every few minutes calling rsync will do the job.
Just make sure to run it from the slave to the master (pulling changes) and
that should do it.
We often use something like the following:
[assuming this is on the pf1 node]
*/15 * * * * if [ ! -f /var/run/mysqld/mysqld.pid ]; then rsync --delete
-ogDprtuv --exclude=var/* --exclude=logs/* pf2:/usr/local/pf /usr/local; fi
You might need a slightly more complex script if you are not running the same
ip on both servers (using a virtual ip) an thus need to rewrite it in the
configuration file.
sed is your friend in that case.
Regards,
--
Louis Munro
[email protected]<mailto:[email protected]> ::
www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 *125 :: +1 (866) 353-6153
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and
PacketFence (www.packetfence.org<http://www.packetfence.org>)
On 2014-05-02, at 9:15 , "Morris, Andi"
<[email protected]<mailto:[email protected]>> wrote:
On this note, I know I can access the admin panel by browsing to
https://secondarypf:1443/admin on the secondary server, but if I go to just
https://secondarypf:1443 I still get sent to the configuration wizard, despite
the pf.conf being populated. Is there a variable on the server somewhere that
needs to be changed so that it knows that the configuration has been done?
Cheers,
Andi
From: Morris, Andi [mailto:[email protected]<http://cardiffmet.ac.uk>]
Sent: 02 May 2014 13:36
To:
'[email protected]<mailto:[email protected]>'
Subject: Re: [PacketFence-users] Change web interface admin password via CLI
------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos. Get
unparalleled scalability from the best Selenium testing platform available.
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
