opendev/system-config
Code Issues Proposed changes

Add kerberos / afs dns info

Browse Source 
Change-Id: Id2cc43f1d67584ac26709d61679b3c6659df8daa
This commit is contained in:
James E. Blair 2017-12-15 08:24:26 -08:00
parent 524c7b404c
commit faa31fa404
2 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/source/afs.rst
View File

@ -497,3 +497,15 @@ Perform maintenance, then restart as above and check the status again::
root@afsdb01:~# bos status afsdb01.dfw.openstack.org -localauth root@afsdb01:~# bos status afsdb01.dfw.openstack.org -localauth
Auxiliary status is: file server running. Auxiliary status is: file server running.
DNS Entries
-----------
AFS uses the following DNS entries::
_afs3-prserver._udp.openstack.org. 300 IN SRV 10 10 7002 afsdb01.openstack.org.
_afs3-prserver._udp.openstack.org. 300 IN SRV 10 10 7002 afsdb02.openstack.org.
_afs3-vlserver._udp.openstack.org. 300 IN SRV 10 10 7003 afsdb01.openstack.org.
_afs3-vlserver._udp.openstack.org. 300 IN SRV 10 10 7003 afsdb02.openstack.org.
Be sure to update them if volume location and PTS servers change.

17
doc/source/kerberos.rst
View File

@ -119,3 +119,20 @@ You should see::
Once this is done the standby server is ready and we can take kdc01 Once this is done the standby server is ready and we can take kdc01
offline. When kdc01 is back online rerun `run-kprop.sh` to ensure offline. When kdc01 is back online rerun `run-kprop.sh` to ensure
everything is working again. everything is working again.
DNS Entries
-----------
Kerberos uses the following DNS entries::
_kpasswd._udp.openstack.org. 300 IN SRV 0 0 464 kdc01.openstack.org.
_kerberos-adm._tcp.openstack.org. 300 IN SRV 0 0 749 kdc01.openstack.org.
_kerberos-master._udp.openstack.org. 300 IN SRV 0 0 88 kdc01.openstack.org.
_kerberos._udp.openstack.org. 300 IN SRV 0 0 88 kdc02.openstack.org.
_kerberos._udp.openstack.org. 300 IN SRV 0 0 88 kdc01.openstack.org.
_kerberos.openstack.org. 300 IN TXT "OPENSTACK.ORG"
Be sure to update them if kdc servers change. We also maintain a
CNAME for convenience which points to the master kdc::
kdc.openstack.org. 300 IN CNAME kdc01.openstack.org.