Sun Cluster HA for Netscape Directory Server Fault Monitor

The probe for the Sun Cluster HA for Netscape Directory Server data service accesses particular IP addresses and port numbers. The IP addresses are from network resources that the Network_resources_used property lists. The Port_list resource property lists the port. See Appendix A, Standard Properties for descriptions of these properties.

The fault monitor determines whether the Sun Cluster HA for Netscape Directory Server instance is secure or non-secure. The monitor probes secure and non-secure directory servers differently. If the keyword "security" is not found in the configuration file (slapd.conf), or the setting security off is found, then the instance is determined to be non-secure. Otherwise, the instance is determined to be secure.

The probe for a secure instance consists of a simple TCP connect. If the connect succeeds, the probe is successful. Secure connect failure or timeout is interpreted as complete failure.

The probe for an insecure instance depends on running the ldapsearch executable provided with the Sun Cluster HA for Netscape Directory Server data service. The search filter that is used is intended to always find something. The probe detects partial and complete failures. The following conditions are considered partial failures. All other conditions are interpreted as complete failures.

• Probe_timeout duration is exceeded while the set of IP addresses is probed for the port. The following list identifies potential causes of this problem.

  • System load.

  • Network-traffic load.

  • Directory-server load.

  • Probe_timeout is set too low for the typical load or the number of directory-server instances (that is, IP address and port combinations) that are being monitored.

• A problem other than timeout occurs while ldapsearch is invoked. Note that this scenario does not apply to the situation where ldapsearch is invoked successfully but returns an error.