Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • fusiondirectory fusiondirectory
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 35
    • Issues 35
    • List
    • Boards
    • Service Desk
    • Milestones
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Terraform modules
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • fusiondirectoryfusiondirectory
  • fusiondirectoryfusiondirectory
  • Issues
  • #5752
Closed
Open
Issue created Jan 12, 2018 by bmortier@bmortierMaintainer

Allow to define multiple LDAP servers for one location

Actual behavior

Connection fails if mutliple LDAP servers are defined for one location.

Expected behavior

FD should be able to move on next LDAP server if the first fails, or simple pass the server array in ldap_connect function to let PHP LDAP manage it

Step by step description of new behaviour

Configure several referrals like this:

    <location name="example-ha">
            <referral URI="ldap://ldap-example-1.local/dc=example,dc=com"
                        adminDn="cn=fusiondirectory,ou=dsa,dc=example,dc=com"
                        adminPassword="secret" />
            <referral URI="ldap://ldap-example-2.local/dc=example,dc=com"
                        adminDn="cn=fusiondirectory,ou=dsa,dc=example,dc=com"
                        adminPassword="secret" />
    </location>

Or defined serveral LDAP servers in one referral, like this:

    <location name="example-ha">
            <referral URI="ldap://ldap-example-1.local/dc=example,dc=com ldap://ldap-example-2.local/dc=example,dc=com"
                        adminDn="cn=fusiondirectory,ou=dsa,dc=example,dc=com"
                        adminPassword="secret" />
    </location>

Benefits

FD will handle failover, allowing to switch to next LDAP server when the first is down

Possible Drawbacks

FD will not be responsible for data consistency when dead LDAP come to life

Edited Feb 06, 2018 by bmortier
Assignee
Assign to
Time tracking