Does CA LDAP Server support High Availability or Failover with ACF2 or Top Secret?
Article ID: 144064
Updated On:
Products
ACF2
ACF2 - z/OS
ACF2 - MISC
Top Secret - LDAP
LDAP SERVER FOR Z/OS
Top Secret
Issue/Introduction
Today the CA LDAP Server is running in one LPAR. Can the CA LDAP Server also could be started in another LPAR to get a High Availability environment? So if one CA LDAP Server goes away for some reason, the other CA LDAP Server should be able to run and support all users? This could also be called a "failover" solution.
Environment
Component : CA LDAP Server for z/OS
Resolution
The LDAP protocol does not support "failover" to switch to a different port for a different LDAP. What is recommended is to use DVIPA (dynamic virtual IP addresses) which is part of TCP/IP. LDAP would connect to DVIPA on the mainframe, and if a connection fails, it will switch to a different one depending on how DVIPA is set up.
Additional Information
IBM Documentation Using dynamic VIPAs
Feedback
Yes
No
Powered by
