Page 1 of 1
AD authentication against primary and secondary server
Posted: Wed Jan 16, 2008 3:55 pm
by bbryan
We are currently authenticating against our primary AD server. I want to set scalix to authenticate against both the primary and secondary in case one goes down. Has anyone done this? Is it simply a matter of generating the keytab for the secondary server and running ommergekeys and omkrbconf again?
Thanks.
Ben
Posted: Thu Jan 17, 2008 3:37 am
by Valerion
From what I could see from traffic a DNS lookup gets done for the KDC even when one is specified in krb5.conf. So I think it will fall back automatically. But I am not 100% sure - you will have to test this, maybe.
Posted: Thu Jan 17, 2008 1:45 pm
by bbryan
We recently took the primary AD server down for maintenance and everyone lost email until we were able to bring it back up because they couldn't authenticate.
By primary and secondary AD servers I mean we have one at server1.domain.local and another at server2.domain.local. I want to configure Scalix to fall back to server2 if server1 is down.
Thanks.
Posted: Mon Jan 21, 2008 3:18 am
by Valerion
Mmm ... in that case I can't help you. Maybe someone else with more AD experience can comment on this? Alternatively you will have to ask Scalix Support for a solution.
Posted: Mon Jan 21, 2008 5:48 am
by mhoroschun
bbryan wrote:We recently took the primary AD server down for maintenance and everyone lost email until we were able to bring it back up because they couldn't authenticate.
By primary and secondary AD servers I mean we have one at server1.domain.local and another at server2.domain.local. I want to configure Scalix to fall back to server2 if server1 is down.
Thanks.
Do you have both KDC's specified in /etc/krb5.conf? I'm pretty confident that that is all that is required. e.g.
Code: Select all
[libdefaults]
default_realm = DOMAIN.LOCAL
[realms]
DOMAIN.LOCAL = {
kdc = server2.domain.local:88
kdc = server1.domain.local:88
admin_server = server2.domain.local:749
default_domain = domain.local
}
Posted: Thu Jan 24, 2008 8:59 am
by lordzik
Hi,
could you please point me to documents you've used to configure authentication against AD?
Thanx in advance.
Posted: Thu Jan 24, 2008 5:38 pm
by bbryan
lordzik wrote:Hi,
could you please point me to documents you've used to configure authentication against AD?
Thanx in advance.
Scalix Setup Guide, look under Authentication.
Posted: Fri Jan 25, 2008 5:15 am
by lordzik
Thank you - i've already found it and integrated Scalix with AD.
There's also great video tutorial:
http://www.netometer.com/video/indexkey ... /index.php