Sun Cluster HA for Netscape Directory Server Fault Monitor

The probe for Sun Cluster HA for Netscape Directory Server accesses particular IP addresses and port numbers. The IP addresses are those from network resources listed in the Network_resources_used resource property. The port is the one listed in the Port_list resource property. For a description of these properties, see Appendix A, Standard Properties.

The fault monitor determines whether the Sun Cluster HA for Netscape Directory Server instance is secure or non-secure. The monitor probes secure and non-secure directory servers differently. If the keyword security is not found in the configuration file (slapd.conf) or the setting security off is found, then the instance is determined to be non-secure. Otherwise, it is determined to be secure.

The probe for a secure instance consists of a simple TCP connect. If the connect succeeds, the probe is successful. Secure connect failure or timeout is interpreted as total failure.

The probe for an insecure instance depends on running the ldapsearch executable provided with Sun Cluster HA for Netscape Directory Server. The search filter used is intended to always find something. The probe detects partial and total failures. The following conditions are considered partial failures; all other conditions are interpreted as total failures.

• Probe_timeout duration is exceeded while probing the set of IP addresses for the port. Potential causes are:

  • System load

  • Network traffic load

  • Directory server load

  • Probe_timeout is set too low for the typical load or the number of directory server instances (that is, IP address and port combinations) being monitored.

• A problem other than timeout occurs while invoking ldapsearch. Note that this scenario does not cover the case where ldapsearch is invoked successfully but returns an error.