Well it's not hard to start over. Maybe spacewalk-reconfigure or similar?  We 
use puppet for the install so it's trivial

On 3 May 2012, at 19:47, "Musayev, Ilya" <[email protected]> wrote:

> Its already installed, any way to alter? I have to redo everything L
>  
> From: [email protected] 
> [mailto:[email protected]] On Behalf Of Tom Brown
> Sent: Thursday, May 03, 2012 2:44 PM
> To: [email protected]
> Cc: [email protected]
> Subject: Re: [Spacewalk-list] high availabilty and spacewalk SSLs
>  
> Set your hostnames to the VIP name during install then change it back for 
> operation. We do it like this with dual masters then dual proxies spread 
> about the dc's
> 
> On 3 May 2012, at 19:30, "Musayev, Ilya" <[email protected]> wrote:
> 
> I’m trying to design spacewalk environment with HA in mind.
>  
> The proposed layout as follows
>  
> 2 master server  
>    masterspwlk-ny.example.com as a hostname and CNAME myspacewalk.example.com 
> – ACTIVE host
>    masterspwlk-ca.example.com as a hostname and CNAME myspacewalk.example.com 
> – STANDBY host, the CNAME flip will occur only if ACTIVE host fails.
>  
> 2 spacewalk proxy hosts (connects to myspacewalk.example.com)
>   spwlk-proxy-ny.example.com with CNAME spwlk-ny.example.com  
>   spwlk-proxy-ca.example.com with CNAME spwlk-ca.example.com
>  
> My problem, the SSL certificates are bounded to hostname and when client gets 
> the cert – it complains about cert mismatch. For example, the cert was issued 
> to masterspwlk-ny.example.com, but the host that is being use is 
> myspacewalk.example.com.
>  
> How would I mitigate this issue, can I recreate the certificates with CNAME, 
> what would be the procedure? Can I have multiple certs on master and proxy 
> hosts?
>  
> Any feedback is appreciated,
>  
> Thanks
> ilya
> _______________________________________________
> Spacewalk-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> _______________________________________________
> Spacewalk-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/spacewalk-list
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list

Reply via email to