Comment 2 for bug 1733836

Revision history for this message
Colleen Murphy (krinkle) wrote :

> Do you know who that would be?

We have a customer with a large LDAP deployment. The maintenance for the LDAP infrastructure is handled by a different department, so they don't have control over when LDAP servers are rotated in or out. They ran into an issue where one or two were swapped out from under them and keystone started causing Gateway Timeouts because it was trying to reach missing LDAP servers in the sequence configured in keystone.conf. They could have avoided this by just pointing keystone at the SRV record that the other team keeps up to date when they swap out servers.