[#UP-713] LDAP service : add redundancy capabilities

uPortal

LDAP service : add redundancy capabilities

Created: 24/Oct/04 11:39 AM Updated: 29/Jan/06 11:42 AM

Component/s:

Authorization

Affects Version/s:

None

Fix Version/s:

2-5-future

Original Estimate:	Unknown	Remaining Estimate:	Unknown	Time Spent:	Unknown
File Attachments:	1. LdapServerImpl.patch (0.4 kb) 2. LdapService.patch (2 kb)

Bugzilla Id:

1747

Description

« Hide

I use LDAP to get person attributes (with PersonDirs.xml).

with old method, I can use ldap redundancy, like this :
<url>ldap://ldap1.univ-nancy2.fr:392/dc=univ-nancy2,dc=fr
ldap://ldap2.univ-nancy2.fr:392/dc=univ-nancy2,dc=fr</url>

It isn't possible with named LDAP service (ldap.xml).

Is it possible to envisage to add this possibility to named LDAP service ?

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Eric Dalquist [25/Oct/04 12:51 PM]

I can add the ability to specify multiple server's in LDAP.xml and have the
connecting code in LdapServerImpl do automatic fail over on failed connection
attempts. This should provide the desired functionality if I understand the
request correctly. Let me know if that sounds like a good solution for you.

[ Permlink | « Hide ]

Vincent MATHIEU [26/Oct/04 03:46 AM]

Yes, it' a goog solution.
JNDI API (since jdk 1.4.1) can support multiple urls for LDAP connection.
So, it's JNDI API who treats the problem.
You can see the example in
http://java.sun.com/products/jndi/tutorial/ldap/misc/url.html
It is very usefull for LDAP authentication and LDAP getattributes

[ Permlink | « Hide ]

Eric Dalquist [26/Oct/04 05:49 PM]

Suns docs aren't clear, are the manager DN & Password shared between all the
servers when using this feature?

[ Permlink | « Hide ]

Vincent MATHIEU [27/Oct/04 05:03 AM]

Yes.

I Use this url with olg LDAP method in my personDirs.xml :
<url>ldap://ldap1.univ-nancy2.fr:392/dc=univ-nancy2,dc=fr
ldap://ldap2.univ-nancy2.fr:392/dc=univ-nancy2,dc=fr</url>

with manager DN and password, and that work's fine, even if the first ldap
serveur is out.

[ Permlink | « Hide ]

Andrew Petro [19/Apr/05 10:31 AM]

Pushing issue back. Hope we can still get to this for the RC.

[ Permlink | « Hide ]

Vincent MATHIEU [29/Jan/06 11:41 AM]

There's 2 patchs, for LdapServices.java and LdapServerImpl.java :

if a tag <url> is present in ldap.xml, so it replace tags <host>, <port> and <protocol>

example :
<url>ldap://ldap1.univ.fr:392/dc=univ,dc=fr ldap://ldap2.univ.fr:392/dc=univ,dc=fr</url>