IDPV3: ldap properties in ldap-authn-config.xml

Cantor, Scott cantor.2 at osu.edu
Tue Sep 8 11:28:03 EDT 2015


On 9/8/15, 11:19 AM, "users on behalf of TISSOT Jacques" <users-bounces at shibboleth.net on behalf of jacques.tissot at unifr.ch> wrote:

> 
>> That's what happens when you use DNS as a load balancer.
>> Stop using DNS as a load balancer.
> 
>> If you don't have a load balancer, there should be ways to do client-side
>> fail over with the ldaptive code, I think, even though it's not a good
>> idea.
>
>So, is there a way to configure a pool of ldap servers by the mean of ldap-authn-config.xml and ldap.properties as it was possible with IDP v2?

I don't know, that's a Daniel question. You don't have to use properties, ever, so one answer is just do whatever you did before as a starting point.

If you have a working system in V2 using JAAS, just use the same thing for now in V3 and worry about changing login methods when you have a reason to change it, if ever. The JAAS back-end is fully supported and isn't going anywhere.

-- Scott



More information about the users mailing list