shinyproxy icon indicating copy to clipboard operation
shinyproxy copied to clipboard

Multiple LDAP does not work as a backup

Open feddelegrand7 opened this issue 2 years ago • 1 comments

Hello,

I'm trying to use multiple LDAP as follows:

authentication: ldap
  admin-groups: ............"
  container-wait-time: 600000
  ldap:
  -  url: first_ldap_url
     user-search-base: OU=Users
     user-search-filter: (sAMAccountName={0})
     group-search-base: OU=Groups
     group-search-filter: (member={0})
     manager-dn: ......................
     manager-password: "........................"
  -  url: second_ldap_url
     user-search-base:
     user-search-filter: (sAMAccountName={0})
     group-search-base: OU=Groups
     group-search-filter: (member={0})
     manager-dn: ..........................................
     manager-password: "..................."

I was expecting that when the first LDAP url is down, the second will be user to authenticate the users. Apparently, it's only using the first one and there's no backup for the second one. Meaning, if the first one is down (while the other one works), the users will still not be able to authenticate (although the second LDAP works).

Unfortunately, the documentation is not clear in that subject. Could you please update the docs in case someone might also think that that's an LDAP backup system.

Thanks in advance.

feddelegrand7 avatar Dec 21 '22 11:12 feddelegrand7

Hi, you are right, if one the servers fail to respond, the login attempt will fail as well. I'll keep this issue open as a feature request to improve this.

LEDfan avatar Mar 06 '23 09:03 LEDfan