17.6 Enabling LDAP Round Robin on a Primary Server to Balance LDAP Queries Between Multiple LDAP Servers

As previously explained, you can define multiple LDAP server connections for a ZENworks Primary Server to access its user source. By default, a Primary Server sends all requests to the first LDAP server in its list. If the request times out, it sends the request to the next LDAP server and so on.

If you want to balance the workload so that the first LDAP server connection doesn’t receive the majority of work, you can enable LDAP round robin on a Primary Server. This will cause LDAP requests from the server to be equally balanced among all of its configured LDAP server connections.

To enable LDAP Round Robin, modify the following file:

Windows: %ZENSERVER_HOME%\conf\datamodel\authsource\authsourceconfig.xml

Linux: /etc/opt/microfocus/zenworks/datamodel/authsource/authsourceconfig.xml

In this file, change:

<DoConnectionRoundRobin>false</DoConnectionRoundRobin>

to

<DoConnectionRoundRobin>true</DoConnectionRoundRobin>

and restart the ZENworks Services.

17.6.1 Restricting LDAP Failover to a Primary Server’s Defined LDAP Servers

By default, a ZENworks Primary Server will first try all the LDAP server connections defined in its list. If those connections fail, it will then honor all connections available in the zone and fail over to one of them. This ensures that an LDAP request is serviced, even if it is through a less than optimal connection.

If you don’t want this default behavior, you can restrict failover to only include the Primary Server’s defined LDAP servers. This means, of course, that the request fails if connections to all defined LDAP servers fail.

To restrict a Primary Server to using only the LDAP server connections defined for it, modify the following file:

Windows: %ZENSERVER_HOME%\conf\datamodel\authsource\authsourceconfig.xml

Linux: /etc/opt/microfocus/zenworks/datamodel/authsource/authsourceconfig.xml

In this file, change:

<HonorAllConnectionsOnFailover>true</HonorAllConnectionsOnFailover>

to

<HonorAllConnectionsOnFailover>false</HonorAllConnectionsOnFailover>

and restart the ZENworks Services.