Managing multiple LDAP hosts

Using LDAP and Crystal Enterprise, you can add fault tolerance to your system by adding multiple LDAP hosts. Crystal Enterprise uses the first host that you add as the primary LDAP host. Subsequent hosts are treated as failover hosts.

The primary LDAP host and all failover hosts must be configured in exactly the same way, and each LDAP host must refer to all additional hosts from which you wish to map groups. For more information about LDAP hosts and referrals, see your LDAP documentation.

To add multiple LDAP Hosts, enter all hosts when you configure LDAP using the LDAP configuration wizard (see Configuring LDAP authentication and mapping LDAP accounts for details.) Or if you have already configured LDAP, go to the Authentication management area of the Crystal Management Console and click the LDAP tab. In the LDAP Server Configuration Summary area, click the name of the LDAP host to open the page that enables you to add or delete hosts.

Note:    

• The order in which the hosts are communicated with matters, so ensure that you add the primary host first, followed by the remaining failover hosts.
• If you use failover LDAP hosts, you cannot use the highest level of SSL security (that is, you cannot select "Accept server certificate if it comes from a trusted Certificate Authority and the CN attribute of the certificate matches the DNS hostname of the server.") For more information, see Configuring LDAP authentication and mapping LDAP accounts.