Package: nslcd
Version: 0.9.4-3
Severity: normal

Hi,

we deploy all our servers with a configuration like this:

uri ldap://127.0.0.1
uri ldaps://ldap1.domain.de/
uri ldaps://ldap2.domain.de/

usually there is no local LDAP daemon running, so it will just fail over
to ldap1, but for important systems like gateways we just deploy a local
replica which is automatically used.

Due to a local configuration error we had a new slapd deployed on a
server that requires authentication (our normal servers don't, yet). nslcd
tried to connect to the server (which was unwilling to perform) but did not
fail over to the other servers.

Sep 14 10:37:18 hostname nslcd[24702]: [8b4567] <passwd="username"> 
ldap_result() failed: Server is unwilling to perform: authentication required

I think "unwilling to perform" can has other causes as well and should
trigger a failover to another server.

Bernhard

Reply via email to