K C, Sachin (Sachin) wrote:
OpenLDAP Team,
Seems to be a bug in OpenLDAP 2.4.8 configured in Proxy mode with
--enable-ldap and --enable-rewrite
The proxy config is
database ldap
suffix "o=<O>"
# List of proxy servers delimited by space
# uri <Server List>
uri "ldap://<Main>:<port>/
ldap://<Secondary>:<port>/"
When the "Main" was running, all requests were passed onto Main. I
brought it down and saw that the requests were sent to "Secondary"
server.
After sometime, I brought the Main server back to live simulating a
recovery from crash. The requests were still redirected to "Secondary"
despite the "Main" server being accessible.
I brought down the "Secondary" server and the requests were directed to
Main server.!!
Is this the correct behaviour? ( I believe that the server in the head
of the list should be contacted everytime a request comes to proxy! )
No. The proxies internally rework the list of servers so that only the
last known good server is always contacted first. So, as soon as "Main"
is not available, "Secondary" becomes first. This is considered an
improvement, since it saves tons of attempts to contact all the
configured servers all times when some of them are down. If this is not
the expected behavior, it can be customized by hacking the
ldap_back_default_urllist() call.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
---------------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Email: pierangelo.masarati(a)sys-net.it
---------------------------------------