Forum Discussion

Amanpreet_Singh's avatar
Amanpreet_Singh
Icon for Cirrostratus rankCirrostratus
Jun 12, 2017

Can LTM maintain LDAP transaction while switching between pool members?

Hi,

 

We have LDAP and LDAPS virtual servers residing on our LTM box. Based on my tests, if there is a connection & transaction to a server (ie. Domain Controller) managed by the F5(as a pool member), and the server and/or service fails, stops, terminates, etc. the F5 does not ‘shift’ the transaction to another server (ie. Domain Controller) for completion.

 

Looks to me what happens is the transaction fails?

 

application delivery
BIG-IP
LTM
security
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Jun 12, 2017

    Yeah. We were also facing same issue but did some minor correction to solve issue. Applied LDAP monitor to pool n added destination address persistence to vip. Till now no issue reported.

     

    • Amanpreet_Singh's avatar
      Amanpreet_Singh
      Icon for Cirrostratus rankCirrostratus
      Jun 12, 2017

      Thanks for your reply. Just wanted to confirm if that would achieve a condition to sustain a ongoing authentication transaction seamlessly on pool member down (like-statefull failover) ?

       

    • Samir_Jha_52506's avatar
      Samir_Jha_52506
      Icon for Noctilucent rankNoctilucent
      Jun 12, 2017

      Yes,But i haven't tried other option like iRule(LB_SELECTED) event.