Configuring Multiple Ldap Servers For Failover - Novell SENTINEL 6.1 SP2 - INSTALLATION GUIDE 02-2010 Installation Manual

LdapLogin {
com.sun.security.auth.module.LdapLoginModule required
userProvider="ldap://137.65.151.12:636/DC=Test-
AD,DC=provo,DC=novell,DC=com"
authIdentity="{USERNAME}@Test-AD.provo.novell.com"
userFilter="(&(sAMAccountName={USERNAME})(objectclass=user))"
useSSL=true;
};
4 Restart the Sentinel service:
/etc/init.d/sentinel stop
/etc/init.d/sentinel start
You have successfully configured the Sentinel 6.1 server for LDAP authentication, and now you can
create Sentinel LDAP user accounts in the Sentinel Control Center. For more information on
creating LDAP user accounts, see
User Guide.
NOTE: To modify an existing LDAP configuration, run the
specify the new values for the parameters.

3.10.2 Configuring Multiple LDAP Servers for Failover

You can configure multiple LDAP servers for failover only on Windows and Linux platforms.
To configure one or more LDAP servers as failover servers for LDAP authentication:
1 Log in to the Sentinel server as
2 Stop the Sentinel service.
/etc/init.d/sentinel stop
3 Change to the
cd <Install_Directory>/config
4 Open the
vi auth.login
5 Update the
each URL by a blank space.
For example:
userProvider="ldap://ldap-url1 ldap://ldap-url2"
NOTE: For Active Directory, ensure that the subtree in the LDAP URL is not blank.
For more information on specifying multiple LDAP URLs, see the description of the
userProvider
security/jaas/spec/com/sun/security/auth/module/LdapLoginModule.html).
6 Save the changes.
7 Export the certificate of each failover LDAP server and copy the certificate file to the
<Install_Directory>/config
For more information, see
Authentication" on page
66 Sentinel 6.1 Installation Guide
"Creating an LDAP User Account for
esecadm
<Install_Directory>/config
file for editing.
auth.login
in the LdapLogin section to specify multiple LDAP URLs. Separate
userProvider
option in Class LdapLogin Module (http://java.sun.com/javase/6/docs/jre/api/
directory on the Sentinel 6.1 server.
Step 1 in section
62.
ldap_auth_config
.
directory:
"Configuring the Sentinel 6.1 Server for LDAP
Sentinel" in the Sentinel 6.1
script again and