Re: autofs5 + ldap + ldap replication

[Jim Summers <jsummers@bachman.cs.ou.edu>]

Rich West wrote:
> Jim Summers wrote:
>> Rich West wrote:
>>   
>>>> Ian Kent wrote:
>>>>       
>>>>> On Tue, 2007-07-24 at 11:48 +0800, Ian Kent wrote:
>>>>>   
>>>>>         
>>> After some tinkering I did finally figure things out.  It had to do with 
>>> the automountInformation field.
>>>
>>> In the LDAP database, I had:
>>> automountInformation: ldap:ldap.mydomain.com:ou=auto.home,dc=mydomain,dc=com
>>>
>>> I found (on an obscure posting elsewhere) that I could get it to work 
>>> via this entry:
>>> automountInformation: ldap:ou=auto.home,dc=mydomain,dc=com
>>>
>>> Basically, I eliminated the LDAP server from the entry.  I'm going to 
>>> hazard a guess, but, since autofs sees that it is an ldap entry, it just 
>>> uses the system's bindings in order to resolve the ou...  Anyhow, it 
>>> works like a champ on FC5, FC6, and FC7.
>>>     
>> Hi Rich,
>>
>> Where are you setting the ldap server?  I have my ldap config in 
>> /etc/ldap.conf.  when  i start autofs with the following map in /etc/auto.master:
>>
>> /home   ldap:ou=auto.home,dc=it,dc=ou,dc=edu
>>
>> i see the following in my debug file:
>>
>> Aug  7 08:58:35 leech automount[11991]: master_do_mount: mounting /home
>> Aug  7 08:58:35 leech automount[11991]: lookup_nss_read_map: reading map ldap 
>> ou=auto.home,dc=it,dc=ou,dc=edu
>> Aug  7 08:58:35 leech automount[11991]: parse_server_string: lookup(ldap): 
>> Attempting to parse LDAP information from string 
>> "ou=auto.home,dc=it,dc=ou,dc=edu".
>> Aug  7 08:58:35 leech automount[11991]: parse_server_string: lookup(ldap): 
>> server "(default)", base dn "ou=auto.home,dc=it,dc=ou,dc=edu"
>>
>> .....
>>
>> Aug  7 09:24:34 leech automount[3283]: lookup_init: lookup(ldap): cannot 
>> connect to server
>>
>> not sure where to specify default server.  in this case, for replication, i 
>> guess a list of servers.  in ldap.conf i have:
>>
>> uri ldaps://serve0 ldaps://serve1
>>
>> so i am not sure that autofs will handle the ssl connections.
>>
>> this would be really useful to get working so that the mounts have some 
>> failover potential.
>>
>> ideas / suggestions?
>>
>> tia
>>
>>
>>   
> 
> I have it in both /etc/ldap.conf and /etc/openldap/ldap.conf, and the
> format is the same:
> uri <type>://host:port/
> For example:
> uri ldap://ldap1.mydomain.com:389/ ldap://ldap2.mydomain.com:389/
> 
> The only difference I have between the two files is that uri is
> capitalized in /etc/openldap/ldap.conf.  I am not sure if there is any
> case sensitivity here, but the default file had it capitalized and I
> just didn't take the chance. :)
> 
> Autofs (along with most of the clients) uses /etc/openldap/ldap.conf. 
> /etc/ldap.conf is primarily used by the nss_ldap/pam_ldap for user
> authentication.
> 
> The only thing I have not yet adjusted is the 'failover period' that you
> referred to.  I don't know what would be a good value for the amount of
> time to allow before failing over to the replica, and I don't yet know
> where that value in order to adjust it.  It's not an autofs
> configuration option from what I can tell...

That worked.  I have been symlinking the /etc/ to /etc/openldap.  I broke the 
link and then created a separate file in /etc/openldap and all is well now.  I 
have seen timelimit and idle_timelimit but neither seem appropriate for an 
adjustment to the bind timeout.  I'll post if i come across anything.

thanks again.

> 
> -Rich

-- 
Jim Summers
School of Computer Science-University of Oklahoma
-------------------------------------------------