Client failover in nslcd sucks. When the connection fails to the primary, the secondary is used. nslcd will not switch back to the primary unless connections to the secondary fail. LDAP query performance takes a nosedive when the extra latency is added in from using an LDAP server in a different datacenter.
Version: unspecified
Severity: normal
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Andrew | T46720 Only list LDAP servers location in the same datacenter in the nslcd configuration | |||
| Resolved | Andrew | T218133 Put our ldap servers behind LVS | |||
| Resolved | Andrew | T46722 Add two read-only LDAP servers in eqiad | |||
| Resolved | akosiaris | T218224 Ganeti request: two new VMs in eqiad for ldap | |||
| Resolved | Andrew | T218398 Update openldap profile to use LE |