Scalix Forums

Hi there,

I have followed the various procedures to get Scalix and open ldap working, especially these two articles:

http://www.scalix.com/wiki/index.php?title=HowTos/Omldapsync
and
http://www.scalix.com/wiki/index.php?title=HowTos/Using_OpenLDAP_for_password_management.

Both worked, and I am kind of happy with the solution.

However, each place where you specify the OpenLDAP server or LDAP hosts the example only shows one server. I have 3 OpenLDAP servers configured for fail over reasons. Therefore if I have to reboot a one of the servers or take it offline for maintenance, then i still have LDAP services.

In the example configuration, I cannot do this. How do I then setup the omldapsync to check with multiple hosts, or to check the first host, and then the second, if it cannot get to the first host, etc.

I have searched google, and even bought the Packt book, Scalix_Linux_Administrator’s_Guide, but can't find out where to do this.

Any help would be greatly appreciated.

regards

Marc

Good question -

I also have a secondary LDAP server, and would like to do the same.

Hi there,

Issue has been resolved. Found the information at the following website, while not referring to a Scalix issue, it does give the pertinent information.

http://sitracker.org/forum/viewtopic.php?f=4&t=1417083.

For those of you who don't want to go and see the link, here is the gist of the post:

You "create a dns record for all the LDAP servers you need,
this might improve the chances for failover when the single LDAP server is down.

how to:
create 2 (or more) A records with the same FQDN but each it's own IP.
then use this FQDN as an LDAP host.

example:
authserver.mydomain.com = 192.168.0.1
authserver.mydomain.com = 192.168.0.2
authserver.mydomain.com = 192.168.0.3

this works as a round-robin lookup, and unfortunately not directly as a failover (unless the DNS servers are that intelligent, afaik win 2003+ knows if the host is down) but more for distributing work load."

Thank you Tomse!!!

Going to test now, and will see if it does indeed work.

Regards Marc