RHDS config directory failover solution

[Richard J Harper]

Hi all,

I have an ldap environment using Red Hat Directory Server 8.0 with 2-way (soon to be 4-way), multi-mastering over SSL. As far as I know there is no documented way of automatically failing over the config directory to to another master (to enable the use of the redhat-idm-console), should the first fail - please correct me if I am wrong.

I have created a multi-mastered replica of NetscapeRoot, then edited the authentication plugin's configuration entry under cn=config in dse.ldif from
nsslapd-pluginEnabled: on
... to
nsslapd-pluginEnabled: off

... and edited the ldapurl line in adm.conf to refer to the local host.

I can now access the redhat-idm-console from either master regardless of the state of the other one.

I would appreciate your comments on my solution that appears to work, but may have some hidden danger of which I am not aware. I am a comparitive newbie to the world of RHDS, so all (constructive) critism is welcomed. (Please note, all communications in my set up MUST use SSL encription)

Cheers,

Richard

[Steven E. Protter]

Shalom Richard,

I think your idea is wonderful, ingenious.

You should run it through a full battery of tests and perhaps market the configuration.

SEP

[Richard J Harper]

Hi SEP,

Thanks for your kind words, have you (or anyone else) had a chance to test this? I have tried some basic tests, pulling network cables and such, but I would appreciate anyone else's input,

thanks,

Richard