A.4 Configuring a NetIQ Ldap Proxy Setup for HA

This section includes the following topics:

A.4.1 Configuring Node 1

Install SUSE Linux Enterprise Server 11.

While configuring Node 1, set up one network interface card for the externally facing IP address, and the another NIC for an internal address that will be used by HA. In this example, the hostname is node1 and the NICs are: eth0 is 192.0.0.11 (external), and eth1 is 10.0.0.1 (private HA).

Configuring an iSCSI Setup for Node 1

  1. Execute the mkdir /shared command.

  2. Launch YaST2.

  3. Click Network Services > iSCSI Initiator.

  4. In the Service tab, set Service Start to When Booting and leave Connected Targets empty.

  5. In Discovered Targets, click Discovery. This locates the iSCSI target server’s partition an populates it.

  6. Enter the iSCSI target server's IP address (you can also retain the default port).

  7. Click Log in (No Authentication). Discovered Targets. The Connected field is automatically populated with the value true.

  8. Go to Connected Targets and set Start-Up to automatic.

  9. Click Finish.

  10. Execute the dmesg command to make the SCSI device /dev/sdb available.

  11. Mount the iSCSI target /dev/sdb as /shared, by executing the mount -t reiserfs /dev/sdb /shared command.

You have configured an iSCSI setup.

Installing NetIQ LDAP Proxy for Node 1

  1. Before initiating the installaion process, manually create a virtual adapter ifconfig eth0:0 192.0.0.1. This is the virtual IP address of your HA cluster.

  2. Install NetIQ LDAP Proxy. For more information about how to install LDAP Proxy, see Installing the LDAP Proxy Files in the NetIQ LDAP Proxy 1.6 Installation Guide.

  3. Set the LDAP Proxy path to . /opt/novell/ldapproxy/bin/nlppath.

  4. Configure the LDAP Proxy instance as follows:

    • The configuration files must be placed on the /shared, nlp.conf in /root/ folder.

    • The proxy server to listen on the HA virtual IP address 192.0.0.1.

  5. Verify whether the LDAP Proxy server is up and running on Node 1.

  6. Shut down Proxy server, by executing the /etc/init.d/nlpd stop command.

  7. Copy the following files to the /shared directory:

    • The conf folder present in the /etc/opt/novell/ldapproxy folder.

    • The log folder present in the /var/opt/novell/ldapproxy directory.

    • The nici folder. Create a symbolic link /var/opt/novell/nici in the /shared/nici folder.

  8. Change the Proxy paths for config and log directories in the /shared/conf/nlpconf.xml file, as follows:

    <proxy-paths> 
      <dir-config>/shared/ldapproxy/conf</dir-config> 
      <dir-log>/shared/ldapproxy/log</dir-log> 
    </proxy-paths>
  9. Modify the init script (/etc/init.d/nlpd). The path of nlpconf.xml is fixed in the init script and you must modify it to a variable default_conf_file. In this example, default_conf_file=/shared/conf/nlpconf.xml.

    NOTE:If you do not want to modify the init script, you can create a symbolic link /etc/opt/novell/ldapproxy/conf in /shared/conf and copy the files in shared directory as mentioned in Step 7. You must modify the nlpconf file available in the /shared location otherwise changes will not take effect.

Disabling nlpd Start at Boot Time

  1. In YaST, navigate to System > System Services (Runlevel).

  2. Disable nlpd start at boot. Alternatively, you can edit the appropriate files in the /etc/rc.d runlevels file.

  3. Click Finish.

NLPD is shut down on Node 1.

A.4.2 Configuring Node 2

Before configuring Node 2, perform the following steps in Node 1:

  1. Shut down the NLPD process, if running, by executing the /etc/init.d/nlpd stop command.

  2. Ensure that the NLPD process has stopped and then execute the umount /shared command. Else, the /shared folder will not unmount as expected.

  3. Release the virtual IP address, by executing the ifconfig eth0:0 down command.

Perform the following steps in Node 2:

  1. Install SLES 11.

  2. Set up one NIC for the externally facing IP address, and the another NIC for an internal address that will be used by HA. In this example, the hostname is node2 and the NICs are: eth0 is 192.0.0.12 (external), and eth1 is 10.0.0.2 (private HA).

Configuring an iSCSI Setup for Node 2

  1. Execute the mkdir /shared command.

  2. Launch YaST.

  3. Click Network Services > iSCSI Target.

  4. In the Service tab, set Service Start to When Booting and leave Connected Targets empty.

  5. In Discovered Targets, click Discovery.

  6. Enter the iSCSI target server's IP address (you can also retain the default port).

  7. Click Log in (No Authentication). Discovered Targets. The Connected field is automatically populated with the value true.

  8. Go to Connected Targets and set Start-Up to automatic.

  9. Click Finish.

  10. Execute the dmesg command to make the iSCSI device /dev/sdb available.

  11. Mount the iSCSI target /dev/sdb as /shared, by executing the mount -t reiserfs /dev/sdb /shared command.

You have configured an iSCSI setup for Node 2.

Installing NetIQ LDAP Proxy for Node 2

To install NetIQ LDAP Proxy for Node 2, follow the steps mentioned in Installing NetIQ LDAP Proxy for Node 1.

To maintain consistence, you can switch to Node 1, by performing the following steps:

On Node 2

  1. Shut down the NLPD process, if running, by executing the /etc/init.d/nlpd stop command.

  2. Ensure that the NLPD process has stopped and then execute the umount /shared command. Else, the /shared folder will not unmount as expected.

  3. Release the virtual IP address, by executing the ifconfig eth0:0 down command.

On Node 1

  1. Manually create a virtual adapter ifconfig eth0:0 192.0.0.1, which will be the virtual IP address of the HA cluster.

  2. Mount the iSCSI target /dev/sdb as /shared, by executing the mount -t reiserfs /dev/sdb /shared command.

  3. Set the eDirectory path as . /opt/novell/ldapproxy/bin/nlppath.

  4. Start NLPD, by executing the /etc/init.d/nlpd start command.

Configuring IP Resource

  1. Click the Resources tab.

  2. On the Primitive tab add a new primitive.

  3. Create clusterip resource as follows:

    • ID: clusterip

    • Class: ofc

    • Provider: heartbeat

    • Type: IPaddr

    • Initial state of resource: Retain the default value Started or select Inherit from its parent.

    • Add Monitor Operation: Select this option.

  4. On the Instance Attribute tab, add ip 192.0.0.1 and nic= eth0:0.

  5. On the Meta Attribute tab, add is-managed = True and resource-stickiness = 100.

  6. On the Operation Tab, add Monitor, Start and Stop with default values.

Configuring File System Resource

  1. Click the Resources tab.

  2. On the Primitive tab add a new primitive.

  3. Create clusterip resource as follows:

    • ID: Shared_Resource

    • Class: ofc

    • Provider: heartbeat

    • Type: Filesystem

    • Initial state of resource: Retain the default value Started or select Inherit from its parent.

    • Add Monitor Operation: Select this option.

  4. On the Instance Attribute tab, add device = /dev/sdc, directory =/shared and fstype = reiserfs.

  5. On the Meta Attribute tab, add is-managed = True and resource-stickiness = 100.

  6. On the Operation Tab, add Monitor with default values.

Configuring NetIQ LDAP Proxy (NLPD) Resource

  1. Click the Resources tab.

  2. On the Primitive tab add a new primitive

  3. Create clusterip resource as follows:

    • ID: NLPD_Process

    • Class: ofc

    • Provider: heartbeat

    • Type: NetIQLDAPProxy

    • Initial state of resource: Retain the default value Started or select Inherit from its parent.

    • Add Monitor Operation: Select this option.

  4. On the Instance Attribute tab, add device = /dev/sdc, directory =/shared, and fstype = reiserfs.

  5. On the Meta Attribute tab, add is-managed = True and resource-stickiness = 100.

  6. On the Operation Tab, add Monitor, Start and Stop with default values.

A.4.3 Configuring the Constraints

Resource Colocation

Create colocation constraint, by specifying the following values:

  • ID: NLPD_Process

  • Resource: clusterip

  • With Resource: NetIQLDAPProxy

  • Score: Infinity

  • Resource Role: Started

  • With Resource Role: Started

Resource Order

Add IP and NLPD process order, by specifying the following values:

Resource Order

  • ID: IP_NLPD

  • Resource: clusterip

  • With Resource: NetIQLDAPProxy

Resource Colocation

  • ID: IP-Shared_Resource

  • Resource: Shared_Resource

  • With Resource: clusterip