==== Alta Disponibilidade com Keepalived ====
<file bash>
# yum install keepalived openldap-clients
</file>

<file bash>
# chkconfig keepalived on
</file>

<file bash>
# cp -ap /etc/keepalived/keepalived.conf{,.dist}
</file>

<code bash>
# cat /etc/keepalived/keepalived.conf
vrrp_instance VIP_1 {
  state MASTER
  interface eth1
  virtual_router_id 1 
  priority 100
  virtual_ipaddress {
    192.0.2.199
  }
} 
virtual_server 192.0.2.199 389 {
  delay_loop 4
  lb_algo wlc
  lb_kind DR
  persistence_timeout 120
  protocol TCP
 
real_server 192.0.2.110 389 {
  weight 1
  MISC_CHECK {
    misc_path "/opt/check_ldap.sh 192.0.2.110"
    }
 }

real_server 192.0.2.111 389 {
  weight 1
  MISC_CHECK {
    misc_path "/opt/check_ldap.sh 192.0.2.111"
    }
 }
}
</code>

<code bash>
# cat /opt/check_ldap.sh 
#!/bin/bash
 
set -e
 
ldapsearch -ZZ -LLL -h $1 -D cn=admin,cn=config -w senha -b dc=laboratorio,dc=com,dc=br
</code>

<file bash>
# chmod +x /opt/check_ldap.sh
</file>

<file bash>
# mkdir /etc/openldap/tls
# scp 192.0.2.110:/etc/ldap/tls/cacert.pem /etc/openldap/tls/
</file>

<code bash>
# vim /etc/openldap/ldap.conf
[...]
TLS_CACERT /etc/openldap/tls/cacert.pem
TLS_REQCERT allow
</code>

<file bash>
# service keepalived start
</file>