Adding a secondary domain server? about adauth

[jzohrab]

@cmendla-cct, I'm not the maintainer, but curious what the use case for this is, and how it would be handled. Eg, if I log in, and my auth succeeds on one server but fails on the other, should that be a successful login or failure?

[cmendla]

JZ

We were thinking in terms of allowing a fail over to a secondary server if
the primary failed. IOW, suppose .10 is our primary and .11 is our
secondary DNS. If everything is pointing to .10 and that goes down, no
one will be able to log onto the rails apps pointing to .10. If we had .11
as a secondary, then users could still log in.

chris

Christopher G. Mendla
Web Developer
CCT
80 East Morris Street
Philadelphia, PA  19148
Phone [phone]
Fax [phone]
[email protected]
www.CCTTapes.com

From: JZ [email protected]
To: Arcath/Adauth [email protected],
Cc: cmendla-cct [email protected]
Date: 02/04/2016 07:45 PM
Subject: Re: [Adauth] Adding a secondary domain server? (#61)

@cmendla-cct, I'm not the maintainer, but curious what the use case for
this is, and how it would be handled. Eg, if I log in, and my auth succeeds
on one server but fails on the other, should that be a successful login or
failure?

—
Reply to this email directly or view it on GitHub.

---

This e-mail may contain privileged, confidential, copyrighted or other legally protected information of Coating & Converting Technologies Corporation, its affiliates and customers. If you are not the intended recipient (even if the e-mail address above is yours), you may not use, copy or retransmit it. If you have received this e-mail by mistake, please notify sender by e-mail, then delete.

To the extent applicable, the information contained or referenced in this email may be subject to a confidentiality, non-disclosure or other similar agreements in effect from time to time in favor of Coating & Converting Technologies Corporation, its affiliates and customers. The transmission or any re-transmission of this email shall not be deemed to constitute a waiver or release of any of such confidentiality obligations.

[jzohrab]

@cmendla-cct - Ah ok, failover/HA. I had the same question. The configuration file allows for domain names:

    # The IP address or Hostname of a DC (Domain Controller) on your network
    c.server = "domain.name.here"

I haven't tried this out ... but domain names will resolve to whatever server is live. I'm not an AD guy and so don't fully grok this myself, but you can stand up redundant virtual DCs etc and the domain name will resolve to whatever is available. This is less of a gem/config issue, and more of an AD question. When you find out (after consulting with your AD tech guys), post here so I can learn too.