Implementing (IP?) Failover to alternate Directory Server

Implementing (IP?) Failover to alternate Directory Server

Post by ohay » Thu, 16 Feb 2006 23:08:39



Hi,

I am working on a system where we have a server-type application that
uses Sun Directory Server 5.2 as a data store (for user information,
etc.), and we have two instances of DS 5.2 configured with replication
between them.  

The  application does both reads and writes to DS 5.2, but it itself
doesn't have any failover capabilities built-in (e.g., where it would
detect if one instance of DS is down and switch to the other instance).
The server application is a COTS product, so we don't have any way to
get into the source code.

So, I was wondering if there is any capability in Solaris 9 that would
allow us to configure things so that when the primary (master/supplier)
DS 5.2 instance is down, Solaris itself would somehow automatically
switch things around (sorry for the non-technical terminology) so that
the server application would access (again, read/write) the backup
(replica/consumer) DS 5.2 instance?

Thanks in advance,
Jim

P.S.  My understanding is that, assuming that we configured things
correctly on the DS 5.2 end, that when the master/supplier DS 5.2 comes
back up, that any changes made to the replica/consumer would be
replicated back (synchronized) to the master/supplier DS 5.2.

 
 
 

Implementing (IP?) Failover to alternate Directory Server

Post by John Smit » Mon, 20 Feb 2006 12:49:36



> Hi,

> I am working on a system where we have a server-type application that
> uses Sun Directory Server 5.2 as a data store (for user information,
> etc.), and we have two instances of DS 5.2 configured with replication
> between them.  

> The  application does both reads and writes to DS 5.2, but it itself
> doesn't have any failover capabilities built-in (e.g., where it would
> detect if one instance of DS is down and switch to the other instance).
> The server application is a COTS product, so we don't have any way to
> get into the source code.

> So, I was wondering if there is any capability in Solaris 9 that would
> allow us to configure things so that when the primary (master/supplier)
> DS 5.2 instance is down, Solaris itself would somehow automatically
> switch things around (sorry for the non-technical terminology) so that
> the server application would access (again, read/write) the backup
> (replica/consumer) DS 5.2 instance?

> Thanks in advance,
> Jim

> P.S.  My understanding is that, assuming that we configured things
> correctly on the DS 5.2 end, that when the master/supplier DS 5.2 comes
> back up, that any changes made to the replica/consumer would be
> replicated back (synchronized) to the master/supplier DS 5.2.

You could setup a hardware virtual IP solution but the easiest and
cheapest is to use the SUN Directory Proxy. It needs to be installed on
a seperate machine to the directories to give it the indepence you want
but it has to install into a directory for its configuration store. One
option is to install a stand-alone directory on the machine with the
application but use a non standard ldap port. Install the directory
proxy on this machine too into this directory so that it listens on the
ldap port. Configure the directory proxy with the other directories and
point the application to the directory proxy. The documentation is
available from docs.sun.com

 
 
 

Implementing (IP?) Failover to alternate Directory Server

Post by ohay » Mon, 20 Feb 2006 23:09:33




> > Hi,

> > I am working on a system where we have a server-type application that
> > uses Sun Directory Server 5.2 as a data store (for user information,
> > etc.), and we have two instances of DS 5.2 configured with replication
> > between them.

> > The  application does both reads and writes to DS 5.2, but it itself
> > doesn't have any failover capabilities built-in (e.g., where it would
> > detect if one instance of DS is down and switch to the other instance).
> > The server application is a COTS product, so we don't have any way to
> > get into the source code.

> > So, I was wondering if there is any capability in Solaris 9 that would
> > allow us to configure things so that when the primary (master/supplier)
> > DS 5.2 instance is down, Solaris itself would somehow automatically
> > switch things around (sorry for the non-technical terminology) so that
> > the server application would access (again, read/write) the backup
> > (replica/consumer) DS 5.2 instance?

> > Thanks in advance,
> > Jim

> > P.S.  My understanding is that, assuming that we configured things
> > correctly on the DS 5.2 end, that when the master/supplier DS 5.2 comes
> > back up, that any changes made to the replica/consumer would be
> > replicated back (synchronized) to the master/supplier DS 5.2.

> You could setup a hardware virtual IP solution but the easiest and
> cheapest is to use the SUN Directory Proxy. It needs to be installed on
> a seperate machine to the directories to give it the indepence you want
> but it has to install into a directory for its configuration store. One
> option is to install a stand-alone directory on the machine with the
> application but use a non standard ldap port. Install the directory
> proxy on this machine too into this directory so that it listens on the
> ldap port. Configure the directory proxy with the other directories and
> point the application to the directory proxy. The documentation is
> available from docs.sun.com

John,

Thanks for your post...

The problem is that I only have the machines that I have (if that makes
any sense) available for this use, so I'd have to put the Directory
Proxy on one of the machines running DS, which would put me back into a
50-50 situation again (i.e., if the machine with proxy goes down).

It turns out that in working with the COTS product vendor, they have
some (apparently) undocumented configuration that does allow me to
configure automatic failover within the application :), and I got that
working this week.

Going back to your comments, when you say "setup a hardware virtual IP
solution", what did you have in mind?  Can you give me an example or
point me to a link on this?

Thanks again,
Jim

 
 
 

Implementing (IP?) Failover to alternate Directory Server

Post by Robert Milkowsk » Wed, 22 Feb 2006 08:20:44



> Hi,

> I am working on a system where we have a server-type application that
> uses Sun Directory Server 5.2 as a data store (for user information,
> etc.), and we have two instances of DS 5.2 configured with replication
> between them.  

> The  application does both reads and writes to DS 5.2, but it itself
> doesn't have any failover capabilities built-in (e.g., where it would
> detect if one instance of DS is down and switch to the other instance).
> The server application is a COTS product, so we don't have any way to
> get into the source code.

> So, I was wondering if there is any capability in Solaris 9 that would
> allow us to configure things so that when the primary (master/supplier)
> DS 5.2 instance is down, Solaris itself would somehow automatically
> switch things around (sorry for the non-technical terminology) so that
> the server application would access (again, read/write) the backup
> (replica/consumer) DS 5.2 instance?

Maybe you should consider Sun Cluster? It's free now and it does support
Directory Server.

Quote:> P.S.  My understanding is that, assuming that we configured things
> correctly on the DS 5.2 end, that when the master/supplier DS 5.2 comes
> back up, that any changes made to the replica/consumer would be
> replicated back (synchronized) to the master/supplier DS 5.2.

Probably only in multi-master configuration.

--
                                                Robert Milkowski

                                                http://milek.blogspot.com

 
 
 

1. IPLT Directory Server 5.1 and Sun One Directory Server 5.1 Difference ?

Curious if there is any different between IPLT Directory Server 5.1
and Sun One Directory Server 5.1.

I just got the IPLT 5.1 distro that comes with Solaris 9 working and I
noticed the Sun ONE Directory 5.1 server has a Service Pack 1.

Is this service pack appropriate for the IPLT Directory server
packages in Solaris 9 ?

2. Monitoring Aix Machine.

3. IP Multipathing Problem (cannot failover interfaces)

4. Trivial fix for get_user undefined in linux-2.4.20 wdt977 kernel module

5. DNS Load Balancingg and IP Failover for Linux?

6. lookin' for CMU SNMP library reference.....

7. IPMP - one IP failover

8. EIDE Cards supported ?

9. Alternate password file for user directories

10. HACMP Failover and IP Takeover

11. VCS active-active failover question (socket bounds to IP when service starts)

12. ip aliasing and failover

13. ip failover