ejabberd - Comments for "LDAP backups configuration"

My 2 cent: this connection

ckone — Fri, 20 Nov 2009 16:20:09 +0000

My 2 cent: this connection client -> LDAP server is with any kind of client, not only with ejd. We had to deal with 3 LDAP servers beeing used in round robin style and we finally decided to go the load balancer way. This simplified many more things, not only the jabber login.

Re: LDAP backups configuration

jsh — Thu, 08 Oct 2009 14:18:13 +0000

What do you mean? There is just a simple round-robin.

In fact it seems to work but there seems to be an association between client => LDAP server. So when the LDAP server associated with a client fails, that client can't connect anymore.

Until a fix is available I think I will stay with just one LDAP server. The behavior seems too much unpredictable for now.

Thanks for your answers.

Re: Isolate servers from client

jsh — Thu, 08 Oct 2009 14:14:56 +0000

Humm, I think we don't have the same conception of "simple" concept ;)

For me the simplest solution is that ejabberd behaves like we expect it to do. Use a pool of LDAP servers and mark server that are unreachable as invalid and poll them regularly to notice when they become reachable again. I'm sure that future releases of ejabberd will address that problem better. There is already a bug open concerning ldap_backups directive.

Nevertheless your solution is very good but I can't aford it ;)

Re: LDAP backups configuration

zinid — Thu, 08 Oct 2009 03:41:56 +0000

Huum, this is really an annoying and weird behavior.

That is a misfeature ;)

I need to validate the fact that only half of the requests fail when one LDAP server is down.

What do you mean? There is just a simple round-robin.

Isolate servers from client

ff1959 — Wed, 07 Oct 2009 23:31:12 +0000

The simplest solution is to place a load-balancer between client and servers and let the load balancer manager failover - isolation of the layers of your system. Alternatively, Directory Proxy Server can perform this same duty, and is LDAP sensitive.

Re: LDAP backups configuration

jsh — Tue, 06 Oct 2009 15:53:34 +0000

Huum, this is really an annoying and weird behavior.
I have to choose between all requests fail (one server config) or half requests fail (two servers config).
I need to validate the fact that only half of the requests fail when one LDAP server is down.

Re: LDAP backups configuration

zinid — Tue, 06 Oct 2009 07:47:05 +0000

I don't think there is a simple solution of your problem because in the case of {ldap_servers, ["server1", "server2"]} round-robin is used, hence if one of the servers fails then 50% of requests fails. In the case of ldap_backups there is no switch back to a normal state (from backup server to main server).