Curent Status - Campus Directory (LDAP)
Planned Maintenance - Campus Directory (LDAP)
Campus Directory (LDAP) (Last 90 days)
System History - Campus Directory (LDAP)
Outage - Campus Directory (LDAP)
As of 10:45 the service is restored. We are still running a subset of the servers, as a couple more have yet to be reloaded, but all data is available.
-----
As of 10am we have a work-around in place that has restored the service, but the data is a bit out of date. We're reloading everything to get current data up.
-----
At about 8:15am this morning, the OpenLDAP read-only replica servers rebooted for their standard weekly patching and did not come back up. OIT staff are working on restoring the service. This would impact the Online Directory (directory.ncsu.edu) as well as new requests via WebRegistry, and likely a few other systems.
Outage - Campus Directory (LDAP)
-- UPDATE --
A package conflict with some dependencies used on the web server pool serving the Campus Directory resulted in an outage. That conflict has been resolved and the services provided by this pool of servers is available again.
-- ORIGINAL --
During a planned update to Campus Directory, an unrelated issue with the web server environment prevented the update from being completed. The OIT-IWS team is working to resolve the issue so that the update can be applied and service restored.
Further updates will be shared via this outage post.
Degradation - Campus Directory (LDAP)
The OpenLDAP service is fully functioning again. From 2am-10:30am the service was returning zero results on queries. From 10:30am-4:45pm results were provided based on yesterday's data. At 4:45pm the updates from the IDM system and HR/SIS self service began processing, but it will take a little while for the backlog to finish.
--------
OpenLDAP (ldap.ncsu.edu) should now be functioning correctly, but it is not receiving updates from SIS/HR self service.
There was an issue over night (around 2am) where the read-write servers database became corrupt. Still have not figured out the cause. When it tried to replicate to the read-only servers they refused the corrupt database, but also didn't load their cached copy. We have turned off the read-write server, which allows the read-only servers to fall back to their local cache. We're working on the recovery procedure for the read-write, but that only affects new changes flowing in from the IDM system and SIS/HR self service at this point.
--------
The OpenLDAP service (ldap.ncsu.edu) is not current serving content. We are are currently investigating.
Planned maintenance - Campus Directory (LDAP)
The primary server for ldap.ncsu.edu will be taken down for about 2 hours to upgrade the server operating system. This server is only used by OIM to make updates to the LDAP database, so those will be paused. Clients of ldap.ncsu.edu connect to the read-only replicas which will remain online during the upgrade. There will not be any interruption of service for ldap.ncsu.edu or the online directory.
Planned maintenance - Campus Directory (LDAP)
We will be adding a filter to the ldap.ncsu.edu service to make it so the homePostalAddress and homePhone attributes on employee records are no longer shared with anonymous binds to LDAP. These attributes will still be visible to binds by trusted service accounts and to binds by the user themselves. This change will ensure that the online campus directory can not publish home information for any users.
Planned maintenance - Campus Directory (LDAP)
This update was completed at about 5:25pm.
-----
We need to migrate the OpenLDAP servers to use AD Kerberos for logins and LDAP binds via SASL. There will be a brief rolling service outage while the authentication process is changed across the 6 replicated servers for service accounts as the OpenLDAP->Kerberos name mappings will change during the migration. Anonymous LDAP queries will continue to work normally during the maintenance.
Planned maintenance - Campus Directory (LDAP)
We will be restarting the ldap.ncsu.edu production servers to implement an internal password change. This will be a rolling upgrade that should not cause any loss of service.
Degradation - Campus Directory (LDAP)
The issue has been resolved and the Campus Directory is fully functional again. Sorry for any inconvenience.
The Campus Directory (https://directory.ncsu.edu/) is in a degraded state. There is a back-end library incompatibility that is limiting the ability to progress beyond the basic search results. Looking at expanded information and updating custom attributes are unavailable at this time. Staff are working to resolve the library incompatibility.