ldap configuration lost when doing a failover

Solved593 views
0
0 Comments

Hi,
I wanted to see if anyone has experienced to have the ldap password and ssl removed from the DataMiner.xml file after doing a failover.

e.g. from dataminer.xml

before:

<LDAP namingContext="DC=domain,DC=local" host="eds.domain.net.au" port="1636" useSSL="True" username="svc_hfc_ps_ldap@domain.local" password="{1A867CE1-36B1-4433-958D-59F26990F083}" auth="PASSWORD">

after:

<LDAP namingContext="DC=domain,DC=local" port="1636" host="eds.domain.net.au" username="svc_hfc_ps_ldap@domain.local" auth="PASSWORD">

Or is something not configured correctly in the LDAP tag that is being dropped after the failover?

this is on DataMiner 9.6.

Thanks in advance!

Carlos Trejo Selected answer as best 11th October 2021

1 Answer

2
5.51K 3 Comments

Hi Carlo,

Which 9.6 CU is this?

9.6 CU7 had a fix for an issue where the LDAP password would not be synchronized correctly (release notes)

Carlos Trejo Posted new comment 11th October 2021
Carlos Trejo commented

Hi Wouter,

We have 2 different environments, the one running on CU23, I found the issue and it is now working as expected.

For the environment running on CU6 is there any workaround to have the ldap configured? When we populate the ldap settings and add the useSSL=”true” and then do a failover to the standby agent, the password is lost.

Thanks!
Wouter Demuynck [SLC] [DevOps Enabler] commented

Besides upgrading away from the CU6 version or requesting a hotfix for this particular fix, I found the following described as workaround. No guarantees given though:

“Workaround:
None: online DMA will have correct configuration and offline – not. What is possible:
1) stop the offline agent
2) edit the dataminer.xml (add password manually)
3) start the offline agent
4) dataminer.xml will be updated on the online agent and password will disappear (if not and it is updated on the online – goto #1) – that’s mean that right now active LDAP configuration is correct on both nodes, however at the moment when DataMiner will be switched – we need to play with configuration again.”
Carlos Trejo commented

Thanks a lot Wouter