LDAP Auth on Deki Cluster

[chlupa]

I'm running deki wiki with a remote DB and attachments share with two load balanced Web/API servers. Is it possible using the core VM to use LDAP auth on both?

The load balancing device we have is taking care of persistent sessions, but eventually one of the nodes goes bad and if you try to restart the service you get a conflicting URI error. If you try to login to the bad node with LDAP you get an API status 0 error.

It seems like you need to do something to make the LDAP authentication service centralized, like lucene.

Any ideas? Do you need anything from the logs?

Thanks in advance if you have any ideas.

Andy

[MaxM]

Running MindTouch in a clustered setup like this may require you to specify a guid for dream. This will allow URIs used internally by dream to be associated with each instance. I don't have the exact instructions for you now but you need to ensure that mindtouch.host.exe starts with a 'guid xxx' setting where xxx is a 128bit hex string. If this doesn't solve your problem please file a bug as it deserves a closer look.

[chlupa]

I'll give it a try on my test setup and report back.

[chlupa]

So I set the guid parameter in the mindtouch.deki.startup.xml the same in both servers. I restarted both with no effect it was still having the same issue.

So, I tried setting LDAP up as a remote service on the secondary host. It seems to be working well now.

I don't know if that is bug or not, but I'll test it here for a few days.

Thanks for the info about GUID.