Rotating Outbound Connectors

Change the outbound connector that a mount target uses.

If a mount target already uses a functioning outbound connector, but you need to update the mount target to use a new outbound connector, we recommend using two outbound connectors when making the change. While it's not a requirement to use two outbound connectors, this strategy can prevent unnecessary outages.

When using two outbound connectors, the existing, functional outbound connector should be used as a backup in case the new outbound connector fails. Outbound Connector 1, the new outbound connector, is used unless the bind operation fails, in which case Outbound Connector 2, the previous outbound connector, is used.

Tip

At any time, including after changing the outbound connector that a mount target uses, you can use metrics or enable NFS Logs for the mount target and search for "connection established" to verify connection details.
    1. On the Mount Targets list page, select the mount target that you want to work with. If you need help finding the list page or the mount target, see Listing Mount Targets.
    2. Select NFS to view the existing NFS settings for the mount target.
    3. Next to LDAP, select Manage.
    4. In the Manage LDAP dialog box, update the outbound connectors as follows:

      1. Outbound Connector 1: Select the new outbound connector that the mount target will use to communicate with the LDAP server.
      2. Outbound Connector 2: Select the outbound connector that was previously used by this mount target to communicate with the LDAP server.
    5. Select Save.
  • Use the fs mount-target update command and --ldap-idmap parameter to update the outbound connectors a mount target uses:

    oci fs mount-target update --mount-target-id <mount_target_OCID> --ldap-idmap <LDAP_details>

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the UpdateMountTarget operation and ldapIdmap along with outboundConnector1Id and outboundConnector2Id to update the outbound connector that a mount target uses.

    For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.