Adding a secondary domain server?

[cmendla]

Is there a way to add a secondary domain server to the adauth.rb file?

i.e. in the lines :

 # The IP address or Hostname of a DC (Domain Controller) on your network

This could be anything and probably wont be 127.0.0.1

Again contact your IT Support if you can't work this out

c.server = "10.0.0.25"

so that I could do something like

c.server = "10.0.0.25", "10.0.0.26"

If this is a current capability, how do you do it? If not, can it be added?

thanks

[jzohrab]

@cmendla-cct, I'm not the maintainer, but curious what the use case for this is, and how it would be handled. Eg, if I log in, and my auth succeeds on one server but fails on the other, should that be a successful login or failure?

[cmendla]

JZ

We were thinking in terms of allowing a fail over to a secondary server if the primary failed. IOW, suppose .10 is our primary and .11 is our secondary DNS. If everything is pointing to .10 and that goes down, no one will be able to log onto the rails apps pointing to .10. If we had .11 as a secondary, then users could still log in.

chris

Christopher G. Mendla Web Developer CCT 80 East Morris Street Philadelphia, PA  19148 Phone 215-271-0610 Fax 215-505-2946 [email protected] www.CCTTapes.com

From: JZ [email protected] To: Arcath/Adauth [email protected], Cc: cmendla-cct [email protected] Date: 02/04/2016 07:45 PM Subject: Re: [Adauth] Adding a secondary domain server? (#61)

@cmendla-cct, I'm not the maintainer, but curious what the use case for this is, and how it would be handled. Eg, if I log in, and my auth succeeds on one server but fails on the other, should that be a successful login or failure?

— Reply to this email directly or view it on GitHub.

---

This e-mail may contain privileged, confidential, copyrighted or other legally protected information of Coating & Converting Technologies Corporation, its affiliates and customers. If you are not the intended recipient (even if the e-mail address above is yours), you may not use, copy or retransmit it. If you have received this e-mail by mistake, please notify sender by e-mail, then delete.

To the extent applicable, the information contained or referenced in this email may be subject to a confidentiality, non-disclosure or other similar agreements in effect from time to time in favor of Coating & Converting Technologies Corporation, its affiliates and customers. The transmission or any re-transmission of this email shall not be deemed to constitute a waiver or release of any of such confidentiality obligations.

[jzohrab]

@cmendla-cct - Ah ok, failover/HA. I had the same question. The configuration file allows for domain names:

    # The IP address or Hostname of a DC (Domain Controller) on your network
    c.server = "domain.name.here"

I haven't tried this out ... but domain names will resolve to whatever server is live. I'm not an AD guy and so don't fully grok this myself, but you can stand up redundant virtual DCs etc and the domain name will resolve to whatever is available. This is less of a gem/config issue, and more of an AD question. When you find out (after consulting with your AD tech guys), post here so I can learn too.