Re: [PacketFence-users] Multi-site PF and clustering?

2017-07-17 Thread Louis Munro via PacketFence-users
Hi Jason,
That's a tricky one.

The closest I can think of that would match your requirements is setting up 
separate instances with two mariadb databases, and then setting up circular 
replication on the person and password tables between the two databases.
You might also want to replicate the node and node_category tables (off the top 
of my head).
I would test that configuration thoroughly before using it in production.

It's hard to find a configuration that will fit all your requirements.
An active/active cluster (with Galera) might help, but then there are issues 
with layer 2 connectivity (the cluster expects the nodes to be in the same 
broadcast domain).

Separate instances are more reliable in case of network partition, but you have 
to find some way to synchronize the person and password tables if you want the 
users to be able to authenticate using the same passwords.

Of course if all the users are held in a separate database/directory then you 
may not have a problem as far as users/passwords are concerned.
There would still be the node information to be replicated though 
(MAC/role/unreg_date).

It's a case of "get creative" I suppose.
Tell us more, we may be able to help.

Regards,
--
Louis Munro
lmu...@inverse.ca   ::  www.inverse.ca 
 
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu ) and 
PacketFence (www.packetfence.org )

> On Jul 13, 2017, at 16:40, Jason 'XenoPhage' Frisvold via PacketFence-users 
>  wrote:
> 
> Hi all,
> 
>   I have two sites I need to manage via Packetfence.  Right now, my
> options are to either put a PF server at each location (which is the
> current plan) or to remotely manage one site via a single PF server.
> We'd like to be able to replicate the users across both sites since we
> have some users that travel.
> 
>   So, the question is, can the PF servers at both sites be set up in a
> cluster fashion, or replicated in some manner?  I'm thinking something
> along the lines of an active/active config, but where they act
> independently if the connection between the two sites is severed.
> 
> Thoughts?
> 
> -- 
> ---
> Jason 'XenoPhage' Frisvold
> xenoph...@godshell.com
> ---
> 
> "Any sufficiently advanced magic is indistinguishable from technology."
> - Niven's Inverse of Clarke's Third Law
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users


[PacketFence-users] Multi-site PF and clustering?

2017-07-13 Thread Jason 'XenoPhage' Frisvold via PacketFence-users
Hi all,

I have two sites I need to manage via Packetfence.  Right now, my
options are to either put a PF server at each location (which is the
current plan) or to remotely manage one site via a single PF server.
We'd like to be able to replicate the users across both sites since we
have some users that travel.

So, the question is, can the PF servers at both sites be set up in a
cluster fashion, or replicated in some manner?  I'm thinking something
along the lines of an active/active config, but where they act
independently if the connection between the two sites is severed.

Thoughts?

-- 
---
Jason 'XenoPhage' Frisvold
xenoph...@godshell.com
---

"Any sufficiently advanced magic is indistinguishable from technology."
- Niven's Inverse of Clarke's Third Law



signature.asc
Description: OpenPGP digital signature
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users