feat(ldap): FallbackServers option + boot-time validation

2026-08-10 16:33:32 -04:00
parent 5fbf53601c
commit 8997a46b74
3 changed files with 59 additions and 2 deletions
@@ -19,6 +19,17 @@ public sealed record LdapOptions
    public string GroupAttribute { get; init; } = "memberOf";
    public int ConnectionTimeoutMs { get; init; } = 10_000;

+    /// <summary>
+    /// Ordered fallback LDAP endpoints tried when the primary (and any earlier fallback)
+    /// fails with a system-side error (connect/TLS, service-account bind, or search).
+    /// Each entry is <c>"host"</c> (adopts <see cref="Port"/>) or <c>"host:port"</c>.
+    /// Empty (the default) disables failover entirely — single-endpoint behavior is
+    /// unchanged. The TLS validation policy (<see cref="ServerCertificateValidationCallback"/>
+    /// / <see cref="AllowInsecure"/>) applies to every endpoint. Endpoint preference is
+    /// sticky: the service keeps using the last endpoint that answered until it fails.
+    /// </summary>
+    public IReadOnlyList<string> FallbackServers { get; init; } = Array.Empty<string>();
+
    /// <summary>
    /// Optional hook to harden (or, in dev, relax) TLS server-certificate validation for the
    /// <see cref="LdapTransport.Ldaps"/> / <see cref="LdapTransport.StartTls"/> transports. When