Home

Results 1 to 4 of 4

Thread: DTAP deployment of large NAM configuration

Hybrid View

  1. #1
    Mark van Reijn NNTP User

    DTAP deployment of large NAM configuration

    Hi everyone,

    for my current project I am looking at deployment of a large NAM
    configuration (100s of everything).

    All of the policies and protected resources will have to be altered for
    our next production release. This is currently planned as manual work
    in the live environment, resulting in considerable downtime.
    I am looking for a way to make all of these changes offline, on a
    backup file for example, and then import the altered configuration to
    minimize downtime.

    Has anyone done this before, and what are the experiences?
    KR,

    Mark


    --
    i d f o c u s
    Identity | Access | Security
    http://www.idfocus.nl


  2. #2
    Edward van der Maas NNTP User

    Re: DTAP deployment of large NAM configuration

    Mark van Reijn wrote:

    > Hi everyone,
    >
    > for my current project I am looking at deployment of a large NAM
    > configuration (100s of everything).
    >
    > All of the policies and protected resources will have to be altered
    > for our next production release. This is currently planned as manual
    > work in the live environment, resulting in considerable downtime. I
    > am looking for a way to make all of these changes offline, on a
    > backup file for example, and then import the altered configuration to
    > minimize downtime.
    >
    > Has anyone done this before, and what are the experiences?
    > KR,


    Hey mark,

    we've done something similar where we imported a large amount of config
    into prod and it was quite a bit of a mess. Lots of manual editing,
    constantly checking app_sc.log, errors etc. I'm not sure how many
    policies you are referring to but since we only had to do an import
    which was already quite painful I can only imagine how painful an
    update would work. The only thing I could come up with is to LDIF the
    info out, modify it and then import it again and then push the config
    to the AG's but I'm not sure how well that would work. I know that the
    policies have their own container in the embedded directory but I can't
    quite remember how its all stored.

    --
    Cheers,
    Edward

  3. #3
    Join Date
    Dec 2007
    Location
    Brooklyn, NY
    Posts
    6,213

    Re: DTAP deployment of large NAM configuration

    On 11/28/2012 6:32 AM, Edward van der Maas wrote:
    > Mark van Reijn wrote:
    >
    >> Hi everyone,
    >>
    >> for my current project I am looking at deployment of a large NAM
    >> configuration (100s of everything).
    >>
    >> All of the policies and protected resources will have to be altered
    >> for our next production release. This is currently planned as manual
    >> work in the live environment, resulting in considerable downtime. I
    >> am looking for a way to make all of these changes offline, on a
    >> backup file for example, and then import the altered configuration to
    >> minimize downtime.
    >>
    >> Has anyone done this before, and what are the experiences?
    >> KR,

    >
    > Hey mark,
    >
    > we've done something similar where we imported a large amount of config
    > into prod and it was quite a bit of a mess. Lots of manual editing,
    > constantly checking app_sc.log, errors etc. I'm not sure how many
    > policies you are referring to but since we only had to do an import
    > which was already quite painful I can only imagine how painful an
    > update would work. The only thing I could come up with is to LDIF the
    > info out, modify it and then import it again and then push the config
    > to the AG's but I'm not sure how well that would work. I know that the
    > policies have their own container in the embedded directory but I can't
    > quite remember how its all stored.


    My request in RMS for Designer for Access Manager was denied... Hmm...


  4. #4
    Edward van der Maas NNTP User

    Re: DTAP deployment of large NAM configuration

    Geoffrey Carman wrote:

    > On 11/28/2012 6:32 AM, Edward van der Maas wrote:
    > > Mark van Reijn wrote:
    > >
    > > > Hi everyone,
    > > >
    > > > for my current project I am looking at deployment of a large NAM
    > > > configuration (100s of everything).
    > > >
    > > > All of the policies and protected resources will have to be
    > > > altered for our next production release. This is currently
    > > > planned as manual work in the live environment, resulting in
    > > > considerable downtime. I am looking for a way to make all of
    > > > these changes offline, on a backup file for example, and then
    > > > import the altered configuration to minimize downtime.
    > > >
    > > > Has anyone done this before, and what are the experiences?
    > > > KR,

    > >
    > > Hey mark,
    > >
    > > we've done something similar where we imported a large amount of
    > > config into prod and it was quite a bit of a mess. Lots of manual
    > > editing, constantly checking app_sc.log, errors etc. I'm not sure
    > > how many policies you are referring to but since we only had to do
    > > an import which was already quite painful I can only imagine how
    > > painful an update would work. The only thing I could come up with
    > > is to LDIF the info out, modify it and then import it again and
    > > then push the config to the AG's but I'm not sure how well that
    > > would work. I know that the policies have their own container in
    > > the embedded directory but I can't quite remember how its all
    > > stored.

    >
    > My request in RMS for Designer for Access Manager was denied... Hmm...


    It would be nice to be able to this more easily....I've made a few
    requests as well in the past but its more of a nice to have rather than
    critical functionality I guess (well, thats probably how novell
    perceives it)

    --
    Cheers,
    Edward

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •