[OPENAM-5867] Data Store LDAP server (admin-ordered) list is reordered by OpenAM Created: 21/Apr/15 Updated: 11/May/20 Resolved: 08/Jan/19
|Affects Version/s:||11.0.0, 11.0.1, 11.0.2, 11.0.3, 12.0.0, 12.0.1, 12.0.2, 12.0.3, 12.0.4, 13.0.0, 13.5.0, 13.5.1, 13.5.2, 14.0.0, 14.1.0, 14.1.1, 14.5.0, 14.5.1, 5.5.1, 6.0.0, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 22.214.171.124, 6.5.0, 126.96.36.199, 188.8.131.52|
|Fix Version/s:||13.5.3, 14.1.2, 6.5.1, 6.0.1, 5.5.2, 7.0.0|
|Reporter:||hadi hahmadi||Assignee:||Sachiko Wallace|
|Remaining Estimate:||Not Specified|
|Time Spent:||Not Specified|
|Original Estimate:||Not Specified|
Ubuntu 12.04 64 -bit, OpenAM 12.0.0, OpenDJ 2.6,
|Sprint:||AM Sustaining Sprint 58, AM Sustaining Sprint 59|
|Support Ticket IDs:|
|Needs QA verification:||
|Are the reproduction steps defined?:||
Yes and I used the same an in the description
DataStore HA and load-balancing can be provided by adding multiple LDAP servers to the DataStore configuration. As documentation promises, ordering the list of LDAP servers is important.
For a site configuration (ID 02) with two servers (IDs 01 and 03). Got to a DataStore configuration and under LDAP servers, add the following four values in the following order:
Same happens when configuration is imported via ssoadm tool or jsp.
|Comment by Peter Major [X] (Inactive) [ 03/Aug/16 ]|
I believe this should be addressed in a major version as it will have upgrade implications.
|Comment by Simon Moffatt [ 31/Mar/17 ]|
As a workaround couldn't external DNS mapping be used? For example it seems the re-order is being done alphabetically. For example, make entries such as a.example.com, b.example.com so they order correctly within OpenAM. Outside of OpenAM add DNS CNAME entries to take a.example.com to the actual server.
|Comment by Ľubomír Mlích [ 18/Mar/19 ]|
Reproduced in 6.5.0
Verified as fixed in ForgeRock Access Management 6.5.1-M3 Build 9264f9957e (2019-March-11 10:19)