Question

Multiple LDAP servers

1

Hi, I am enabling the LDAP module in an AD network. Can I specify multiple directory controllers to ensure that sync and authentication occur with any of the specified directory controllers? In the module configuration I can specify multiple LDAP servers; is that for failover purpose? Regards, Paul

asked 2011-11-09

Paul Poetsma

3 answers

Pieter van de Braak · Answer 1 · 2011-11-10

This is what i got from the documentation:

Use Ldap User authentication

Turns on LDAP authentication and tells the XAS it can use this configuration file (you may specify multiple LDAP servers which will be checked for authentication recursively).

Paul Poetsma · Answer 2 · 2011-11-11

Let me give an example of what I mean. When I define one LDAP server, and when that server is down for whatever reason, the sync will fail. Can I add an alternative/second server (2nd domain controller in the same domain as the first) so the sync can use that one as backup. Or should this high-availability requirement be solved at DNS level or similar to ensure that there's always a server in the pool to connect to?

Michel Weststrate · Answer 3 · 2011-11-14

It should be solved at another level indeed. Multiple LDAP servers are available to import data from multiple ldap providers, not for failover purposes.