two ldap server for ha

[Marco Strullato]

Hi all,
I have a problem with openssh lpk:
I set up /etc/ldap.conf, /etc/openldap/ldap.conf and sshd_config and I can log to the system easily.

The problem is that high availabiliy does not work: if the first ldap server is down the authentication fails.

I mean, I wrote

into /etc/ldap.conf
uri ldap://server1:389 ldap://server2:389

into /etc/openldap/ldap.conf
URI ldap://server1:389 ldap://server2:389

into sshd_config
LpkServers  ldap://server1:389 ldap://server2:389


what's wrong?

Thanks


Marco Strullato

[Andrea Barisani-3]

On Thu, Nov 22, 2007 at 02:57:15PM +0100, Marco Strullato wrote:

> Hi all,
> I have a problem with openssh lpk:
> I set up /etc/ldap.conf, /etc/openldap/ldap.conf and sshd_config and I can
> log to the system easily.
>
> The problem is that high availabiliy does not work: if the first ldap server
> is down the authentication fails.
>
> I mean, I wrote
>
> into /etc/ldap.conf
> uri ldap://server1:389 ldap://server2:389
>
> into /etc/openldap/ldap.conf
> URI ldap://server1:389 ldap://server2:389
>
> into sshd_config
> LpkServers  ldap://server1:389 ldap://server2:389
>

What do you mean with "does not work" ? What's the exact symptom?

Does failover work for other LDAP activity (if you use nss_ldap or pam_ldap)
?

First of all try using LpkLdapConf /etc/ldap.conf so that you can re-use the
same configuration, just in case.

Cheers

>
> what's wrong?
>
> Thanks
>
>
> Marco Strullato

--
Andrea Barisani                             Inverse Path Ltd
Chief Security Engineer                     -----> <--------

<andrea@...>          http://www.inversepath.com
0x864C9B9E 0A76 074A 02CD E989 CE7F AC3F DA47 578E 864C 9B9E
       "Pluralitas non est ponenda sine necessitate"
--
openssh-lpk-user@... mailing list