Re: autofs5 + ldap + ldap replication

[Rich West <Rich.West@wesmo.com>]

Jim Summers wrote:
> Rich West wrote:
>   
>>> Ian Kent wrote:
>>>       
>>>> On Tue, 2007-07-24 at 11:48 +0800, Ian Kent wrote:
>>>>   
>>>>         
>> After some tinkering I did finally figure things out.  It had to do with 
>> the automountInformation field.
>>
>> In the LDAP database, I had:
>> automountInformation: ldap:ldap.mydomain.com:ou=auto.home,dc=mydomain,dc=com
>>
>> I found (on an obscure posting elsewhere) that I could get it to work 
>> via this entry:
>> automountInformation: ldap:ou=auto.home,dc=mydomain,dc=com
>>
>> Basically, I eliminated the LDAP server from the entry.  I'm going to 
>> hazard a guess, but, since autofs sees that it is an ldap entry, it just 
>> uses the system's bindings in order to resolve the ou...  Anyhow, it 
>> works like a champ on FC5, FC6, and FC7.
>>     
>
> Hi Rich,
>
> Where are you setting the ldap server?  I have my ldap config in 
> /etc/ldap.conf.  when  i start autofs with the following map in /etc/auto.master:
>
> /home   ldap:ou=auto.home,dc=it,dc=ou,dc=edu
>
> i see the following in my debug file:
>
> Aug  7 08:58:35 leech automount[11991]: master_do_mount: mounting /home
> Aug  7 08:58:35 leech automount[11991]: lookup_nss_read_map: reading map ldap 
> ou=auto.home,dc=it,dc=ou,dc=edu
> Aug  7 08:58:35 leech automount[11991]: parse_server_string: lookup(ldap): 
> Attempting to parse LDAP information from string 
> "ou=auto.home,dc=it,dc=ou,dc=edu".
> Aug  7 08:58:35 leech automount[11991]: parse_server_string: lookup(ldap): 
> server "(default)", base dn "ou=auto.home,dc=it,dc=ou,dc=edu"
>
> .....
>
> Aug  7 09:24:34 leech automount[3283]: lookup_init: lookup(ldap): cannot 
> connect to server
>
> not sure where to specify default server.  in this case, for replication, i 
> guess a list of servers.  in ldap.conf i have:
>
> uri ldaps://serve0 ldaps://serve1
>
> so i am not sure that autofs will handle the ssl connections.
>
> this would be really useful to get working so that the mounts have some 
> failover potential.
>
> ideas / suggestions?
>
> tia
>
>
>   

I have it in both /etc/ldap.conf and /etc/openldap/ldap.conf, and the
format is the same:
uri <type>://host:port/
For example:
uri ldap://ldap1.mydomain.com:389/ ldap://ldap2.mydomain.com:389/

The only difference I have between the two files is that uri is
capitalized in /etc/openldap/ldap.conf.  I am not sure if there is any
case sensitivity here, but the default file had it capitalized and I
just didn't take the chance. :)

Autofs (along with most of the clients) uses /etc/openldap/ldap.conf. 
/etc/ldap.conf is primarily used by the nss_ldap/pam_ldap for user
authentication.

The only thing I have not yet adjusted is the 'failover period' that you
referred to.  I don't know what would be a good value for the amount of
time to allow before failing over to the replica, and I don't yet know
where that value in order to adjust it.  It's not an autofs
configuration option from what I can tell...

-Rich