Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I am creating LDAP proxy server using OpenLDAP, server will be used for user authentication (using simple bind over SSL/TLS). Is there a way to make OpenLDAP proxy to cache simple bind credentials and respond to simple bind requests from cache in case main LDAP server goes temporary offline?

May be there are any (preferably free) alternatives that can cache authentication requests?

share|improve this question

1 Answer 1

I guess you already know about OpenLDAP Proxy Cache Engine since you are creating such server. Anyway, I would do this with the proxy cache engine; just set the cache TTL high enough so it can wait backend server reboots and other minor offline cases.

If you have multiple LDAP servers, you can also configure them in multi-master mode and put a load-balancer in front of them. That way you don't have to worry about a single LDAP server going down, everything continues to work smoothly automatically.

share|improve this answer
    
Thanks! I know about The Proxy cache Engine, but will it cache credentials (or only LDAP search results)? –  DavisNT Apr 13 '12 at 9:50
1  
Have not tried, but at least it has pcacheBind directive. That Specifies a template for caching Simple Bind credentials based on an already defined pcacheTemplate., according to man page slapo-pcache. –  Janne Pikkarainen Apr 13 '12 at 9:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.