On 10/17/2012 07:55 PM, Jan Wieck wrote:
> On 10/17/2012 9:38 PM, Joe Conway wrote:
>> But the fact that failover seems so fragile is troubling. If it fails to
>> failover so often in our "migration" tests, why should we think that it
>> won't fail to failover when we really need it? Is failover fragile
>> because we need to STONITH before doing the failover? Would that prevent
>> these race conditions?
> 
> Failover was never meant as a "migration" path. It was meant as a "last
> resort" thing when the old master was found "dead for good".

OK. Now I understand that part ;-)
We will switch to the method Steve mentioned (at least for our
migrations) -- move set and then subscribe set.

Thanks for all the help!

Joe

-- 
Joe Conway
credativ LLC: http://www.credativ.us
Linux, PostgreSQL, and general Open Source
Training, Service, Consulting, & 24x7 Support