sync hungroups, clients files, users across multiple servers
Charles Tompkins
crt at thig.com
Fri Nov 10 21:38:05 CET 2006
That is exactly what I want to do!
I just started using subversion with RANCID and am not very knowledgeable
about svn. How can I get a 'diff' spread around like that?
I am thinking about what you have said and it could be completely wrong,
1. A change is commited on a watched file like 'huntgroups.'
2. A local script diffs it against a remote subversion repo copy (or a
local copy?) via a cron job
3. The diff gets checked in to svn.
4. The scripts on the other RADIUS servers then notice the diff in the repo
copy and apply it to their own files?
Sounds like I need to build up my script writing skills...
Regards,
-Charles
------------
Master timed out! Holding election...
I am declaring myself the master!
-----Original Message-----
From: freeradius-users-bounces+crt=thig.com at lists.freeradius.org
[mailto:freeradius-users-bounces+crt=thig.com at lists.freeradius.org] On
Behalf Of A.L.M.Buxey at lboro.ac.uk
Sent: Friday, November 10, 2006 3:20 PM
To: FreeRadius users mailing list
Subject: Re: sync hungroups, clients files, users across multiple servers
Hi,
> Greets!
>
> What is a good way or considered best practice for folks to sync changes
to
> critical files in use by radius like huntgroups and clients.conf and users
> across multiple RADIUS servers. I am not using MySQL backend, but rather
> relaying requests for auth off to PAM which checks against a
> samba/NT-Domain, thus the user account existing locally on the server.
With
> several servers it becomes a PIA and can lead to misconfiguration errors
due
> to human data entry when you have to enter everything into each server.
>
> Does anyone want to share a script they have written to do this?
you could use rsync, http://samba.anu.edu.au/rsync/
or subversion, http://subversion.tigris.org/
and actually keep your configurations all held on such a central repository.
you can then actually update the configuration from any one of your servers
and get them all to autometically get the latest version... be that with a
frequent cronjob that checks for changes (and if there have been any,
download
them!) or from a forced update. this way you also have a centralised way
of
seeing what changed, when and who by.
alan
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
CONFIDENTIAL NOTICE: This email including any attachments, contains
confidential information belonging to the sender. It may also be
privileged or otherwise protected by work product immunity or other
legal rules. This information is intended only for the use of the
individual or entity named above. If you are not the intended
recipient, you are hereby notified that any disclosure, copying,
distribution or the taking of any action in reliance on the contents
of this emailed information is strictly prohibited. If you have
received this email in error, please immediately notify us by
reply email of the error and then delete this email immediately.
More information about the Freeradius-Users
mailing list