<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>Another reason periodic restarts of the cluster are necessary. ;)<br>
<br>
Sent from my iPhone</div>
<div><br>
On Aug 19, 2016, at 9:30 AM, Anthony Holloway <<a href="mailto:avholloway+cisco-voip@gmail.com">avholloway+cisco-voip@gmail.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">UPDATE: After a Dirsync restart on Pub and Tomcat on all Subs, the LDAP sync is now using the top/primary LDAP server in the list again. This was a TAC recommendation and there was nothing in the logs indicating why it was choosing the third
LDAP server in the first place. Therefore, I don't know what might trigger it again in the future. The defect Brian Meade noted maybe the closest thing to it.
<div><br>
</div>
<div><a href="https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuu55380" target="_blank" style="font-size:12.8px">https://bst.<wbr>cloudapps.cisco.com/bugsearch/<wbr>bug/CSCuu55380</a><br>
<div><br>
</div>
<div>Also, I have yet to schedule an outage to test if LDAP Auth/Dirsync is failing over between the servers properly. I will update the list once that is done.</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Aug 4, 2016 at 12:59 PM, Anthony Holloway <span dir="ltr">
<<a href="mailto:avholloway+cisco-voip@gmail.com" target="_blank">avholloway+cisco-voip@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">All,
<div><br>
</div>
<div>I'm working on an issue where my CUCM 11.0 system is configured with 3 LDAP servers under LDAP Authentication AND LDAP Directory.</div>
<div><br>
</div>
<div>What I'm see is, for packet captures of CUCM when a login attempt is made, the CUCM server sends the BIND request to the last server in the list of three servers. However, when performing a directory sync, CUCM server sends the requests to the first server
in the list.</div>
<div><br>
</div>
<div>I'm trying to read up on what the expected behavior is, as I've always thought of it as top = primary; middle = secondary; bottom = tertiary. In fact, a few years ago there was an issue with CAD logins, when the primary server was unreachable and CAD
would timeout before CUCM tried the secondary server.</div>
<div><br>
</div>
<div>The SRND is no help with only the following passage:</div>
<div><br>
</div>
<div>
<div><i><b>High Availability</b></i></div>
<div><i>Unified CM LDAP Synchronization allows for the configuration of up to three redundant LDAP servers for each directory synchronization agreement.
<span style="background-color:rgb(255,242,204)">Unified CM LDAP Authentication allows for the configuration of up to three redundant LDAP servers for a single authentication agreement.</span> You should configure a minimum of two LDAP servers for redundancy.
The LDAP servers can be configured with IP addresses instead of host names to eliminate dependencies on Domain Name System (DNS) availability.</i></div>
</div>
<div><i><br>
</i></div>
<div>Source: <a href="http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/collab11/collab11/directry.html?bookSearch=true#pgfId-1085451" target="_blank">
CUCM 11.0 SRND</a></div>
<div><br>
</div>
<div>So, what do you know, or what can you share, that states one way or the other, why CUCM might use a server in the listing, other than the first one, assuming the first server is healthy and accessible?</div>
<div><br>
</div>
<div>I did search the bug toolkit and didn't see any defects matching this scenario.</div>
<div><br>
</div>
<div>Thanks.</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>_______________________________________________</span><br>
<span>cisco-voip mailing list</span><br>
<span><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span><br>
</div>
</blockquote>
</body>
</html>