I have 1 OD Master and 3 replicas. The replicas are in different
offices around the country connected via site to site VPN – all 4
servers are running 10.4.11. I want to start upgrading to Leopard. I
understand I cannot mix Tiger and Leopard servers as Master/replicas.
I will upgrade the Master first, but what happens in the interim – I
can’t possibly be in each office at the same time – or even within
days of each other to get the replicas upgraded... I don’t have the
option of having someone else do the upgrades.
I’m wondering what is my best course of action. Will I have to demote
the replicas to stand alone and not use LDAP while I’m waiting to
upgrade? Will the LDAP cache on the replica continue to work in the
interim but not receive updates? Will the Master be horribly affected
by having the 10.4 replicas waiting to be upgraded?
Any insights anyone has will be greatly appreciated. I will be in one
of our most remote offices next week so if I need to prepare that
server in some way for the coming Master upgrade, now would be a great
time to do it.
Thanks,
Elly
Elly,
I'm planning the same exercise except my servers are all in the same
location.
I will archive my 10.4 OD and restore it on a clean install of 10.5
(same name/address). Once the master is upgraded I will install a clean
10.5 on a replica and add it as a new replica to the OD master. Once the
first replica is functioning I will move on to the next.
The replicas will continue to provide LDAP, Password server and Kerberos
services without a master.
There are a few caveats to consider:
1) LDAP writes will be referred to the master. If the master is using
the same name/address, clients that write to LDAP would be referred to
the master and make their changes, and those changes will not be
replicated down to the replicas.
2) Password Server is not master-replica, it's multi-master. So a client
could change their password in the password database on an OD replica
and that change would not be propogated to the OD master.
3) Any changes you made in slapd.conf or in slapd_macosxserver.conf (and
other places, for sure) will be lost.
If at all possible you should really test your upgrade plan in a
development environment.I finally have a stack of minis in my office to
test my procedures and I'm pretty happy about it.
Best of luck,
Matt
--
Matt Richard '08
Access and Security Coordinator
Computing Services
Franklin & Marshall College
email@hidden
(717) 291-4157
