From owner-freebsd-questions@FreeBSD.ORG Wed Sep 21 01:40:42 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8E5E81065670 for ; Wed, 21 Sep 2011 01:40:42 +0000 (UTC) (envelope-from jamesbrandongooch@gmail.com) Received: from mail-wy0-f173.google.com (mail-wy0-f173.google.com [74.125.82.173]) by mx1.freebsd.org (Postfix) with ESMTP id 2672E8FC08 for ; Wed, 21 Sep 2011 01:40:41 +0000 (UTC) Received: by wyh22 with SMTP id 22so1502472wyh.18 for ; Tue, 20 Sep 2011 18:40:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=kHcMZQTOI2NLYl//PjSp9XiOIt1ZzJWV+/UkbqtlujY=; b=ZYMs4EuVuN9KiH6/aUEJ3bJLJC1wDw6ufXWCWJJHbdqxE+mIClx9qnAHk8AVAPI4bB lxN6PBpG0rHv4eG/L60SNsl6gApmf2Hy3zpb9DhVnn/3i+acuSl/jF4H5sx3q3XKZGzX XfwwqajdFAj9AWQkGutdAttU5dUjI89xzjl+4= MIME-Version: 1.0 Received: by 10.216.163.83 with SMTP id z61mr1577867wek.58.1316569199988; Tue, 20 Sep 2011 18:39:59 -0700 (PDT) Received: by 10.216.131.200 with HTTP; Tue, 20 Sep 2011 18:39:59 -0700 (PDT) In-Reply-To: References: <4E784905.1080007@infracaninophile.co.uk> Date: Tue, 20 Sep 2011 20:39:59 -0500 Message-ID: From: Brandon Gooch To: Rafael NAVAZA Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-questions@freebsd.org Subject: Re: OpenLDAP + CARP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Sep 2011 01:40:42 -0000 On Tue, Sep 20, 2011 at 6:02 AM, Rafael NAVAZA wrote: > > Thank you for the reply Matthew. > > I'm indeed using the built in > failover capability of LDAP clients. It works just fine when the first > LDAP server is powered off, but it does not work that well when slapd > becomes a zombi ( because the clients take about 1 min to try the second > =A0LDAP server, for each request, every time ... ) > It is for that reason I'm interested in building a HA cluster for OpenLDA= P. > > I'm > =A0currently using the single-master replication and I will certainly mov= e > =A0to a mirrormode or a n-way multimaster replication schema (as long as > the multimaster is used with CARP, this mode is equivalent to a > mirrormode with more than 2 replicas, isn't it ?). > > As far as I > know CARP will not check if the slapd is running correctly; that could > be a problem if the CARP Master has a failing slapd. Do I have to > monitor slapd with a third party software (like Monit) ? Can I configure > =A0CARP and OpenLDAP to watch each other more closely ? > > Rafael. > Could this help in your situation? http://www.liquidx.net/blog/2006/04/03/nss_ldap-undocumented-nss_reconnect_= tries/ -Brandon