Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP2 - ADMINISTRATION, Administration Manual

Page: 127 / 142

Implementing a Multiple-Tree BCC
B
127
no
vd
ocx
(e
n)
13
Ma
y 20
09
B
Implementing a Multiple-Tree BCC
Although the information contained in the other sections of this document describes an eDirectory
TM
single-tree implementation of Novell
®
Business Continuity Clustering (BCC) 1.1 Support Pack
(SP) 2 for NetWare
®
6.5 SP8 (same as Novell Open Enterprise Server (OES) 2 SP1 NetWare), the
information is also useful for configuring and managing BCC in a multiple-tree environment. This
section contains additional instructions and information for multiple-tree BCC implementations.
Š
Section B.1, “Planning a Multiple-Tree Solution,” on page 127
Š
Section B.2, “Using Identity Manager to Copy User Objects to Another eDirectory Tree,” on
page 128
Š
Section B.3, “Configuring User Object Synchronization,” on page 128
Š Section B.4, “Creating SSL Certificates,” on page 129
Š
Section B.5, “Synchronizing the BCC-Specific Identity Manager Drivers,” on page 130
Š Section B.6, “Preventing Identity Manager Synchronization Loops,” on page 131
Š
Section B.7, “Migrating Resources to Another Cluster,” on page 132
B.1 Planning a Multiple-Tree Solution
Consider the following guidelines when creating a multiple-tree business continuity cluster.
Š Section B.1.1, “Cluster Synchronization,” on page 127
Š
Section B.1.2, “User Synchronization,” on page 127
Š Section B.1.3, “SSL Certificates for Drivers,” on page 128
B.1.1 Cluster Synchronization
Creating the Cluster Synchronization driver pair and its associated SSL Certificate is required in
order for BCC to work between the two eDirectory trees. Typically, the cluster synchronization is
between one cluster in each of the trees, then those clusters synchronize the information with other
peer clusters in the same tree.
B.1.2 User Synchronization
If user-based access control is required for the cluster resources in the business continuity cluster,
you must synchronize the user identities between the two eDirectory trees.To do this, create a single
User Synchronization driver for the business continuity cluster.
If user-based access control is not needed for your cluster resources, the User Synchronization driver
is optional.
Only one User Synchronization driver is required per eDirectory tree, even if you have multiple
business continuity clusters set up. It is okay to have multiple User Syncrhonization drivers per tree.
The User object container should be in the same eDirectory partition as the Identity Manager node
and cluster that you are using to create the User Synchronization driver. If the User object container
is not in the same partition, you can create a partition for the User container, then add a read/write