ldap/kdc: switch to eel with firestorm as a backup

eel is our new ldap and kdc server. during migration, firestorm (old
server) will be the secondary ldap/kdc in case things break.

Author: 24apricots

modules/ocf/files/auth/krb5.conf

@@ -26,8 +26,9 @@
 
 [realms]
 	OCF.BERKELEY.EDU = {
+		kdc = kdc.ocf.berkeley.edu
 		kdc = kerberos.ocf.berkeley.edu
-		admin_server = kerberos.ocf.berkeley.edu
+		admin_server = kdc.ocf.berkeley.edu
 	}
 
 [domain_realm]

modules/ocf/files/auth/ldap/ldap.conf

@@ -1,5 +1,5 @@
 # LDAP server and SSL options
-uri ldaps://ldap.ocf.berkeley.edu
+uri ldaps://ldap0.ocf.berkeley.edu ldaps://ldap.ocf.berkeley.edu
 tls_reqcert hard
 tls_cacert /etc/ssl/certs/ca-certificates.crt
 

modules/ocf_mail/files/site_ocf/postfix/ldap-aliases.cf

@@ -2,7 +2,7 @@
 # http://www.postfix.org/ldap_table.5.html
 # http://postfix.1071664.n5.nabble.com/Postfix-ldap-table-authenticate-to-LDAP-using-GSSAPI-or-EXTERNAL-td54278.html
 
-server_host = ldaps://ldap.ocf.berkeley.edu/
+server_host = ldaps://ldap0.ocf.berkeley.edu/
 start_tls = no
 tls_require_cert = no
 tls_ca_cert_file = /etc/ssl/certs/ca-certificates.crt