Hello ,
I have a problem with meta and multiple uri :
Two AD server
opensuse 13.1
openldap 2.4.39 (install from repo)
make a meta backend that work but I when I configure it I use this
directive , try to make a failover conf :
uri ldap://172.17.150.47:3268/ou=AD,ou=TOUT,dc=example,dc=fr
ldap://172.17.150.48:3268/
Work like a charm until 172.17.150.47 go down --> slapd never try to
contact 172.17.150.48 ...
slapd.conf ( relevant part )
----------------------------------------------------------
network-timeout 1
timeout 3
idletimeout 10
writetimeout 10
database meta
suffix "ou=AD,ou=TOUT,dc=example,dc=fr"
uri ldap://172.17.150.47:3268/ou=AD,ou=TOUT,dc=example,dc=fr
ldap://172.17.150.48:3268/
suffixmassage "ou=AD,ou=TOUT,dc=example,dc=fr" "dc=example,dc=fr"
idassert-bind bindmethod=simple
binddn="cn=xxxxxx,cn=Users,dc=example,dc=fr" credentials=<secret>
mode=none
idassert-authzFrom "dn.regex:.*"
--------------------------------------------------------------
I search on the list and found this :
http://www.openldap.org/lists/openldap-technical/201208/msg00231.html
(one post on the thread, I read all of them)
The problem is exactly the same : if I start slapd and 172.17.150.47 not
present (iptable output drop or reject) never ask 172.17.150.48 (tcpdump
on the interface of slapd server)
in
http://www.openldap.org/lists/openldap-technical/201208/msg00247.html
(same thread)
Howard Chu :
Sounds like you should file an ITS.
Pierangelo: looking at libldap/request.c and libldap/.open.c, it appears that
request.c:ldap_new_connection() expects open.c:ldap_int_open_connection() to
return -2 on an asynch open, but ldap_int_open_connection() unconditionally
returns 0. This is probably interfering with back-meta's urllist_proc.
--
-- Howard Chu
CTO, Symas
Corp.http://www.symas.com
Director, Highland
Sunhttp://highlandsun.com/hyc/
Chief Architect,
OpenLDAPhttp://www.openldap.org/project/
so I look to the ITS 7372
http://www.openldap.org/its/index.cgi/Incoming?id=7372;selectid=7372
But no answers, and no trace on changelog
it's something wrong in my conf (if so tell me what) and if no can some
of the dev take a look at the problem ?
Thank's and have a good day.
Nicolas