Hey,
Thanks to your responses.
Yes it should be the way to make a health check by using kerberos tickets.
Today I've got the idea that ldirectord checks each node and not my cluster
webpage.
So I am able to create a virtual host in apache which ist name is the node's
name.
And in this virtual hosts file I define no kerberization.
I hope this should work. :-)
If someone is good at Perl coding it would be great to implement it in
ldirectord
with some more parameters (REALM, KDC, KRB5_FILE)
Thanks for your fast response!
Andrew
-----Ursprüngliche Nachricht-----
Von: lvs-users-bounces@xxxxxxxxxxxxxxxxxxxxxx
[mailto:lvs-users-bounces@xxxxxxxxxxxxxxxxxxxxxx] Im Auftrag von Simon Horman
Gesendet: Freitag, 25. Februar 2011 07:53
An: Graeme Fowler
Cc: LinuxVirtualServer.org users mailing list.
Betreff: Re: [lvs-users] ldirectord and kerberos
On Thu, Feb 24, 2011 at 08:31:42PM +0000, Graeme Fowler wrote:
> On Thu, 2011-02-24 at 19:48 +0100, L.S. Keijser wrote:
> > actually, AFAIK kerberos is not 'LVS-compatible'. See:
>
> That's missing the point slightly, Leon - what I believe Andrew is
> after is the ability for ldirectord to use a previously obtained &
> cached Kerberos TGT to obtain a Kerberos service ticket from a KDC and
> use that in the healthcheck process against the realservers.
>
> Phew, I typed all the above without taking a breath ;)
>
> With ldirectord being written in Perl, and there being a pretty well
> documented module Authen::Krb5 available - it's possible. But right
> now ldirectord doesn't do that.
I'll add that patches to ldirectord are always welcome.
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx Send
requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|