Re: [otrs] Use LDAP backends which have dns round robin?

19 Oct 2010

      Bonjour ;)

Thank you for the answer, and the link! It works as expected.

I just added something to better handle dns round robin.

Then my config looks like this:

use Socket;

($name, $aliases, $addrtype, $length, @addrs) = gethostbyname "ourldapservers.example.com";
foreach $host (@addrs)
{
        push(ldaphosts,inet_ntoa ($host));
}

And then:
$Self->{'AuthModule::LDAP::Host1'} = \@ldaphosts; 
$Self->{'AuthModule::LDAP::Params1'} = {
       timeout => 10,
       };
[..]

==> 10s timeout to move to another server in case the first isn't answering.

And same for customer auth + customeruser
$Self->{'Customer::AuthModule::LDAP::Host1'} = \@ldaphosts ;

$Self->{CustomerUser1} = {
        Name => 'LDAP Backend',
        Module => 'Kernel::System::CustomerUser::LDAP',
        Params => {
            # ldap host
            Host => \@ldaphosts,
                SSCOPE => 'sub',
                UserDN => 'CN=XXXXX,DC=FR',
                UserPw => 'XXXXX',
            # ldap base dn
            BaseDN => 'OU=Ressources_Locales,DC=COMMUN,DC=AD,DC=SNCF,DC=FR',
            SourceCharset => 'utf-8',
            #SourceCharset => 'iso-8859-1',
            #DestCharset => 'iso-8859-1',
            DestCharset => 'utf-8',
                Params => {
                port    => 389,
                timeout => 10,
                async => 0,
                version => 3,
            },

        },

Bastien.

-----Message d'origine-----
De : otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] De la part de Daniel Maher
Envoyé : mardi 19 octobre 2010 10:51
À : otrs@otrs.org
Objet : Re: [otrs] Use LDAP backends which have dns round robin?

On 10/19/2010 09:40 AM, LEBLANC Bastien (EXT CAP GEMINI) wrote:
...
Hi all,
we have here ldap servers setup with a dns round robin.
...
BUT, on otrs, we get an error, and OTRS doesn't retry on other IP:
Can't connect to ourldapservers.example.com : IO::Socket::INET: connect: Connexion refusée at Kernel/System/CustomerUser/LDAP.pm line 132.
Is it possible to have a different behavior (configuration issue?) ?
Should I fill a bug ?
(we are currently using otrs.2.4, can't try otrs 3 for the moment)
(Salut!)

This may help :
http://lists.otrs.org/pipermail/otrs/2009-January/025337.html

--
Daniel Maher <dma AT witbe DOT net>
"The Internet is completely over." -- Prince
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
-------
Ce message et toutes les pièces jointes sont établis à l'intention exclusive de ses destinataires et sont confidentiels. L'intégrité de ce message n'étant pas assurée sur Internet, la SNCF ne peut être tenue responsable des altérations qui pourraient se produire sur son contenu. Toute publication, utilisation, reproduction, ou diffusion, même partielle, non autorisée préalablement par la SNCF, est strictement interdite. Si vous n'êtes pas le destinataire de ce message, merci d'en avertir immédiatement l'expéditeur et de le détruire.
-------
This message and any attachments are intended solely for the addressees and are confidential. SNCF may not be held responsible for their contents whose accuracy and completeness cannot be guaranteed over the Internet. Unauthorized use, disclosure, distribution, copying, or any part thereof is strictly prohibited. If you are not the intended recipient of this message, please notify the sender immediately and delete it.