18.5 提供 LDAP 负载平衡和容错

如果您拥有多个用于访问用户来源（目录）的 LDAP 服务器，可以对“ZENworks 服务器”进行配置，让其知晓各个 LDAP 服务器。这样就可以提供负载平衡和容错功能。

例如，如果您拥有多个“ZENworks 服务器”，可以将每个服务器配置为通过不同的 LDAP 服务器访问用户来源。这样就可以在 LDAP 服务器间更为平均地分配工作负载。

同样，对于每个“ZENworks 服务器”，您可以列出多个可通过其连接到用户来源的 LDAP 服务器。如果其中一个 LDAP 服务器无法使用，“ZENworks 服务器”会使用其他 LDAP 服务器。

为“ZENworks 服务器”定义其他 LDAP 服务器：

  1. 将 alt-servers.properties.sample 文件复制到名为 alt-servers.properties 的新文件。该文件位于“ZENworks 服务器”中的以下目录：

    • Windows：c:\program files\novell\zenworks\conf\datamodel\authsource

    • Linux：/etc/opt/novell/zenworks/datamodel/authsource

  2. 更改 alt-servers.properties 文件，以包括用户来源名称和可用于访问该用户来源的 LDAP 服务器的列表。

    以下文件包含格式化项目的指导。

    # Sample alt-servers.properties file.
#
# The alt-servers.properties file allows you to configure how this server will connect to a particular user source.
# When connecting to a LDAP user source, ZENworks will try to connect to the servers in the order listed in this file.
# This allows for fail-over to other LDAP servers and for load distribution, if different ZENworks Primary Servers are
# configured with the server addresses in a different order.
#
# * The [user-source-name] must exactly match how the user source name appears on the configuration page in ZCC.
# * You must specify the LDAP port along with each server address.
# * SSL is configured for the entire user source, not for each individual server. You must specify either the
#   SSL port or the clear text port for all servers, depending on how the user source is configured in ZCC.
# * If the server-list.properties file contains an entry for a user source, ZENworks will not try to connect to the
#   server address configured in ZCC. It only tries the addresses listed in the properties file.
# * If you create or modify the server-list.properties file, you will need to restart the Novell ZENworks Server and
#   Novell ZENworks Loader services for it to take effect.
# * Performance will be impacted if one or more of the servers at the top of the list are down, as ZENworks attempts to
#   connect to the servers in order. This is particularly true of the CASA authentication token service, which is
#   contacted when a user tries to log in to ZENworks on a workstation.
#
# Format:
#
# [user-source-name]=\
#   [host1]:[port] \
#   [host2]:[port] \
#   [host3]:[port]
#
# Example:
#
MY_EDIR_TREE=\
  edir1.novell.com:636 \
  edir2.novell.com:636 \
  edir3.novell.com:636 \
  edir4.novell.com:636

  3. 重启动 ZENworks 服务器。

  4. 对每个要定义其他 LDAP 服务器的“ZENworks 服务器”重复步骤 1到步骤 3。