A fully deployed Kron PAM platform includes controller units and controlled units in different regions. All these instances are independent of each other. Each region has its own master that runs SAPM and LDAP jobs.
There are two types of clusters for the watchdog mechanism:
- Watchdogs running in an environment without the Controller unit.
- Watchdogs running in an environment with the Controller unit.
Each environment consists of master and member instances. The Master instance runs extra jobs related to SAPM and LDAP management. A parameter defined in the Kron PAM database determines which instance becomes the master, and can be changed if needed.