Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm setting up OpenLDAP on a router/firewall that's running OpenBSD + CARP + pfsync. Curious enough, I'm wondering what's my best approach to making sure the setup stays redundant between the two boxes in the event one goes down. Do I simply set up replication between the two hosts, and use a VIP (Virtual IP) that all clients use to speak to it? Is there a better way of handling it?

share|improve this question
up vote 1 down vote accepted

You've got the right idea - Set up replication between the two hosts (on non-CARP IPs) and point your clients at the CARP virtual IP. Debug your LDAP replication (syncrepl) first obviously :-)

There are other ways to handle this with load balancing (using pf), but that requires more hardware in order to maintain redundancy.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.