[389-users] registered with an admin server behind a firewall

[Joel Heenan]

The consumers are in a DMZ and have no direct access to the configuration
server. Obviously the masters are allowed to talk to the consumers to send
them replication information, but the consumers are not allowed to talk
back.

In all the guides they say run the perl script register-ds-admin.pl and type
in the name of the configuration server. But this won't work because they
aren't allowed to connect. Is there another way say can you export the
configuration information to an LDIF and then import it ?

Joel

On Fri, Jul 24, 2009 at 1:50 AM, Rich Megginson <rmeggins at redhat.com> wrote:

> Joel Heenan wrote:
>
>> I'm using Directory Server 8.1 on CentOS.
>>
>> I have multi-mastered servers setup in our administrative network secured
>> and locked away working well. I have consumers setup out in other network
>> zones and am planning to setup replication out to these servers. I wanted to
>> keep the console as a single administration point for all the servers but I
>> can't work out how I can register the consumers with the console given that
>> they have no network access. Is the access needed once you have registered
>> them? If not I could punch a quick ssh tunnel or something which would allow
>> them to register.
>>
> I don't understand - you want to remotely manage the consumer servers with
> the console (which uses network access) but the consumers have no network
> access?
>
>>
>> Thanks
>>
>> Joel
>>
>> ------------------------------------------------------------------------
>>
>> --
>> 389 users mailing list
>> 389-users at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> 389 users mailing list
> 389-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20090727/0c754f54/attachment.htm>