Authentication to two ldap directories
Peter Schober
peter.schober at univie.ac.at
Sun Jun 16 06:49:34 EDT 2019
* Ignacio Amoeiro Bosch <ignacio.amoeiro at extern.ibsalut.es> [2019-06-15 12:01]:
> I have configured two ldap directories for authentication following
> the documentation [...]. It works fine, but when one of the
> directories is down then it stop authentication although the user
> i'm triing to authenticate his LDAP server is up. ¿How I can resolve
> that? I have read ldaptive documentation, and can't found how to
> solve it.
I don't know the answer to your question (wherher ldaptive can be made
to do what you want) but I personally find it unreasonable to expect
every single application to "support" a certain kind of behaviour when
really your LDAP /service/ as such (not "server") should simply never
fail (catastrophic exceptions aside).
LDAP is simple and cheap to replicate and make highly available, so if
the case you're asking about is a common one then really any effort
should go into avoiding the root cause[1] (at the source) instead of
trying to get all applications that need to connect to LDAP to handle
failure "better":
Mostly because it's probably unattainable (not all applications can
be made to support the desired behaviour when faced with server
outages) but also because you'd spend possibly more time solving only
a part of the problem -- any requests that would require a specific
LDAP server to be up would still fail!
Best regards,
-peter
[1] You can't avoid "server failure" but you can avoid "service outage
by server failure" by having multiple servers for each function, with
a loadbalancer of some sorts in front.
More information about the users
mailing list