Horizon LDAP

Horizon LDAP is the data repository for all Omnissa Horizon 8 configuration information. Horizon LDAP is an embedded Lightweight Directory Access Protocol (LDAP) directory that is provided with the Omnissa Horizon Connection Server installation

Horizon LDAP contains standard LDAP directory components that are used by Horizon 8.

• Horizon 8 schema definitions
• Directory information tree (DIT) definitions
• Access control lists (ACLs)

Horizon LDAP contains directory entries that represent Horizon 8 objects.

• Remote desktop entries that represent each accessible desktop. Each entry contains references to the Foreign Security Principal (FSP) entries of Windows users and groups in Active Directory who are authorized to use the desktop.
• Remote desktop pool entries that represent multiple desktops managed together
• Virtual machine entries that represent the vCenter Server virtual machine for each remote desktop
• Horizon 8 component entries that store configuration settings

Horizon LDAP also contains a set of Horizon 8 plug-in DLLs that provide automation and notification services for other Horizon 8 components.

LDAP Replication

When you install a replicated instance of Horizon Connection Server, Horizon 8 copies the Horizon LDAP configuration data from the existing Horizon Connection Server instance. Identical Horizon LDAP configuration data is maintained on all Horizon Connection Server instances in the replicated group. When a change is made on one instance, the updated information is copied to the other instances.

If a replicated instance fails, the other instances in the group continue to operate. When the failed instance resumes activity, its configuration is updated with the changes that took place during the outage. A replication status check is performed every 15 minutes to determine whether each instance can communicate with the other servers in the replicated group and whether each instance can fetch LDAP updates from the other servers in the group.

You can use the dashboard in Omnissa Horizon Console to check the replication status. If any Horizon Connection Server instances have a red icon in the dashboard, click the icon to see the replication status. Replication might be impaired for any of the following reasons:

• A firewall might be blocking communication
• The OmnissaVDMDS service might be stopped on a Horizon Connection Server instance
• DSA (Directory Service Agent) options configured on the Horizon LDAP instance might be blocking the replications. For example, as described in KB 1021805, if replication was previously disabled using repadmin.exe options (like -DISABLE_INBOUND_REPL), that would block the replications.
• A network problem has occurred

By default, the replication check occurs every 15 minutes. You can use ADSI Edit on a Horizon Connection Server instance to change the interval. To set the number of minutes, connect to the Horizon distinguished name appropriate for your deployment's version and edit the pae-ReplicationStatusDataExpiryInMins attribute on the CN=Common,OU=Global,OU=Properties object.

Note: Starting with version 2503, the name to connect to is DC=vdi,DC=horizon,DC=internal.

The pae-ReplicationStatusDataExpiryInMins attribute value should be between 10 minutes and 1440 minutes (one day). If the attribute value is less than 10 minutes, Horizon 8 treats it as 10 minutes. If the attribute value is greater than 1440, Horizon 8 treats it as 1440 minutes.