
UNSOLVED
Load balancing AD authentication (haproxy)
Our domain controllers occasionally crash so we've setup an haproxy cluster and would like to have the Isilon direct its authentication traffic through it. However, when I try and set the domain controller to this server, it gives me this error:
Failed to set DC affinity for 'mydomain.com' to 'haproxy.mydomain.com': LW_ERROR_FAILED_TO_LOOKUP_DC
This is most likely because that server is not in the trusted list as show by `isi auth ads trusts controllers list mydomain.com`.
Is there a way to add a trusted domain controller for a particular domain?
Thanks!
Rob
Responses (1)
Solutions (0)

j2add
1 Message
679
1
Posted March 1st, 2015 16:00
You are on the right track.
You might try adding trusted domains as lookup domains to existing ads auth provider. This should not have any impact and can be easily modified with the commands:
isi auth ads modify --help
isi auth ads modify --lookup-domains
isi auth ads view