Load balancing AD authentication (haproxy)

Question

Our domain controllers occasionally crash so we've setup an haproxy cluster and would like to have the Isilon direct its authentication traffic through it. However, when I try and set the domain controller to this server, it gives me this error: Failed to set DC affinity for 'mydomain.com' to 'haproxy.mydomain.com': LW_ERROR_FAILED_TO_LOOKUP_DC This is most likely because that server is not in the trusted list as show by `isi auth ads trusts controllers list mydomain.com`. Is there a way to add a trusted domain controller for a particular domain? Thanks! Rob

j2add · Answer

You are on the right track.

You might try adding trusted domains as lookup domains to existing ads auth provider. This should not have any impact and can be easily modified with the commands:

isi auth ads modify --help

isi auth ads modify --lookup-domains

isi auth ads view

Isilon

Was this post helpful?