Hi,

I am new to Heartbeat. How can we configure openLDAP with Heartbeat for High-availability of Authentication.

I need to have slapd running on both the machine because of ldap replication.
And when slapd is stopped on master, IPAddr resource (Virtual IP) should be transferred to stand-by machine, where slapd was already running.

I am using Heartbeat version 2.1.4 (heartbeat-2.1.4-2.1.i386.rpm), Linux machines of RHEL4. And I am using openLDAP of version 2.4.11. and Cluster size is of 2 machine.

I have configured a IPAddr Resource (virtual IP addrsss) successfully using CRM (Heartbeat Version 2). When I make a machine down, Heartbeat transfer IPAddr resource to another node and when it is up, it again gets back the IPAddr..

I have following questions.

1.What entries should I add to the cib.xml, so that slapd resource should be running on both the nodes?

2.When slapd is stopped on the master node (having IPAddr Resource). That node should detect slapd service as stopped and should release IPAddr resource.

3.And, stand-by node should get the control of IPAddr resource, when slapd gets stopped on master node.

4.Starting of slapd service should be controlled by Heartbeat or manually?

5.My slapd is also not conformed to the LSB Spec. If anybody is having slpad with LSB spec, please share with me.

If anybody have these kind of Cluster controlling slapd. Please share cib.xml with me.

-Jadeja

Can I ask why you need HA for this? In general you should be able to just run a multi master model and use either, with any application worth its salt allowing multiple ldap servers to be defined for authenticating. It's not something that we can say you *must* do of course, but it's by far the most common way I have seen of doing this. If you do need a single ip for some reason I'd probably look at something much much simpler. You don't need to cluster the services from what I see due to having a multi master model. both servers deserve to exist in their own right, so it's just an ip shift. There's a great little tutorial you can google for called "cheap ip takeover" or "simple ip takeover" something like that, which just pulls an IP back and forth based on an external command, and for you i'd just make the slave box do an ldapsearch of the master and take the vip if that fails.