High Availability for ADAM - Sharepoint

What's the relationship to SharePoint ?

I can't see anything in your question about any SharePoint product.

Mike Walsh
WSS FAQ http://www.wssfaq.com
no private e-mail questions please

Ricardo Santos wrote:
> Hi all,
>
> not sure this is the most apropriate NG, but since it's related to SHP, I'll
> give it a shot.
>
> What's the correct way to provide high availability to a ADAM instance?
> As in this scenario:
> I have a Web application that uses ADAM as a provider and have a couple of
> different servers running a replicated instance that holds my users accounts
> I have set up a multi-addressed DNS record for the adam servers (A record,
> both servers IPs, to take advantage of round-robin) and created necessary SPN
> records
> LDAP binding keeps failing :-(
>
> I'm almost sure this as something to do with SPN/Kerberos, so my setup is
> problably incapable of addressing my needs.
>
> Short of going with NLB (and I'm not sure that'll work, either), can someone
> point me in the right direction? I could'nt find any high availability
> documentation for ADAM :-S
>
> Details: OS on all servers is Win2K3 R2 SP2 Standard
>
> Thanx in advance
>
> Ricardo Santos

Hi Mike,

sorry about that. You're right. I missed that *very* important part.

This is related to Sharepoint in that the application using the ADAM
instance is in fact Sharepoint Server 2007.
One particular Web application/Site Collection has an Extranet Zone that
uses the ADAM instance for User autentication (using LDAPMembership
Provider), while internal users get authenticated against AD.
This dual authentication provider is a requirement for that application.

Now, the database server (SQL 2K5) for the SHP farm is clustered, ence, high
availability.
The SHP farm as several load-balanced (not windows NLB) servers for Web
server service and all other Services (Search, Excel, Forms, etc.) have at
least 2 servers available in the farm running them.

The ADAM instance is replicated in two servers, but I can't get my setup to
use them both in a transparent, no-change needed, configuration.

All the info and examples I could find failed to mention how to do it with a
replicated ADAM instance, ence my question.

I hope I did a better job explaining the issue this time.

Thank you for your support.

Ricardo


"Mike Walsh" wrote:

> What's the relationship to SharePoint ?
>
> I can't see anything in your question about any SharePoint product.
>
> Mike Walsh
> WSS FAQ http://www.wssfaq.com
> no private e-mail questions please
>
> Ricardo Santos wrote:
> > Hi all,
> >
> > not sure this is the most apropriate NG, but since it's related to SHP, I'll
> > give it a shot.
> >
> > What's the correct way to provide high availability to a ADAM instance?
> > As in this scenario:
> > I have a Web application that uses ADAM as a provider and have a couple of
> > different servers running a replicated instance that holds my users accounts
> > I have set up a multi-addressed DNS record for the adam servers (A record,
> > both servers IPs, to take advantage of round-robin) and created necessary SPN
> > records
> > LDAP binding keeps failing :-(
> >
> > I'm almost sure this as something to do with SPN/Kerberos, so my setup is
> > problably incapable of addressing my needs.
> >
> > Short of going with NLB (and I'm not sure that'll work, either), can someone
> > point me in the right direction? I could'nt find any high availability
> > documentation for ADAM :-S
> >
> > Details: OS on all servers is Win2K3 R2 SP2 Standard
> >
> > Thanx in advance
> >
> > Ricardo Santos
>