[Building Sakai] External LDAP users in a clustered environment.

Daniel McCallum dmccallum at unicon.net
Fri Jul 2 12:35:51 PDT 2010


Mixed-case EIDs, perhaps?

http://jira.sakaiproject.org/browse/KNL-261

- Dan	

Kusnetz, Jeremy wrote:
> We have been experiencing some weird issues with our external LDAP 
> user.  We are currently running 3 Sakai servers.
> 
>  
> 
> There are a few issues going on, but I think they are all interrelated, 
> and I think it’s stemming from how different nodes in the cluster update 
> each other.
> 
>  
> 
> When adding a new user to a site, not all the servers know about this 
> user in that site.  When you log in as that user some of the nodes do 
> not show the site being available to that user.  Of our 3 nodes sometime 
> 1 or 2 of them do not know about that site for the user.
> 
>  
> 
> Also when changing the roles of users in a site it doesn’t seem to stick 
> at times.  You can change an instructor to student, hit save and the 
> user is still an instructor.  Eventually when playing with roles and 
> adding students, the list of users for a site won’t show up anymore.  In 
> catalina.out you can see an error about a user that doesn’t exist.
> 
>  
> 
> When looking at the realm for the site you can see normal users and then 
> a bunch of internal ID instead of the EIDs.  When looking at these 
> internal IDs in the site, they don’t match up to anything in the 
> SAKAI_USER or SAKAI_USER_ID_MAP tables.  They seem to be “orphaned” 
> internal_ids that just don’t match up with anything.  When you click on 
> that internal_id in the site’s realm Sakai just gives an error that it’s 
> an invalid user.
> 
>  
> 
> We don’t have this problem at all with local users, just remote LDAP users.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"


More information about the sakai-dev mailing list