samba - May 2006 - RE Failover LDAP?

Samba 3 By Example Chapter 6.

Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server

passdb backend = ldapsam:ldap://master.abmas.biz \
                 ldapsam:ldap://slave.abmas.biz

Cheers,
Adrian Sender.

>From: Golden Butler <golden@cnt.org> To: Samba Mailing List 
><samba@lists.samba.org> Subject: [Samba] Failover LDAP? Sent: Friday,
26
>May 2006 1:41:19 PM Okay, I've searched around on this, but can't
find any
>examples or docs.  Is
>there a way to specify a second ldap server in the smb.conf, in case the 
>primary
>ldap server fails or become unreachable?
>- Delamatrix

On Sun, 2006-05-28 at 19:05 +1000, adrian sender wrote:
> Samba 3 By Example Chapter 6.
> 
> Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server
> 
> passdb backend = ldapsam:ldap://master.abmas.biz \
>                  ldapsam:ldap://slave.abmas.biz
This is the incorrect way to handle this problem.  The correct syntax is
given as an example in the smb.conf manpage:

  passdb backend = ldapsam:"ldap://ldap-1.example.com \
                  ldap://ldap-2.example.com"

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20060529/c247a16e/attachment.bin

Sorry you are right;

Figure 6.2. Samba Configuration to Use a Single LDAP Server

The addition of a failover LDAP server can simply be done by adding a second 
entry for the failover server to the single ldapsam entry, as shown here 
(note the particular use of the double quotes):

passdb backend = ldapsam:"ldap://master.abmas.biz \
	                  ldap://slave.abmas.biz"

Thats my fault for not using the correct example.

Adrian Sender.

>From: Andrew Bartlett <abartlet@samba.org>
>To: adrian sender <adrian_au1@hotmail.com>
>CC: samba@lists.samba.org
>Subject: Re: RE [Samba] Failover LDAP?
>Date: Mon, 29 May 2006 13:36:25 +1000
>
>On Sun, 2006-05-28 at 19:05 +1000, adrian sender wrote:
> > Samba 3 By Example Chapter 6.
> >
> > Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server
> >
> > passdb backend = ldapsam:ldap://master.abmas.biz \
> >                  ldapsam:ldap://slave.abmas.biz
>
>This is the incorrect way to handle this problem.  The correct syntax is
>given as an example in the smb.conf manpage:
>
>   passdb backend = ldapsam:"ldap://ldap-1.example.com \
>                   ldap://ldap-2.example.com"
>
>Andrew Bartlett
>
>--
>Andrew Bartlett                                http://samba.org/~abartlet/
>Authentication Developer, Samba Team           http://samba.org
>Student Network Administrator, Hawker College  http://hawkerc.net
><< signature.asc >>

Thanks Andrew and the others who gave suggestions on this.  I guess the 
only left now is to actually test it to see if it works. 

- delamatrix

Andrew Bartlett wrote:
> On Sun, 2006-05-28 at 19:05 +1000, adrian sender wrote:
>   
>> Samba 3 By Example Chapter 6.
>>
>> Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server
>>
>> passdb backend = ldapsam:ldap://master.abmas.biz \
>>                  ldapsam:ldap://slave.abmas.biz
>>     
>
> This is the incorrect way to handle this problem.  The correct syntax is
> given as an example in the smb.conf manpage:
>
>   passdb backend = ldapsam:"ldap://ldap-1.example.com \
>                   ldap://ldap-2.example.com"
>
> Andrew Bartlett
>
>