By default, the PingDirectoryProxy server has two health check instances enabled for use on all servers:

  • Consume Admin Alerts. This health check detects administrative alerts from the PingDirectory server, as soon as they are issued, by maintaining an LDAP persistent search for changes within the cn=alerts branch of the PingDirectory server. When the PingDirectoryProxy server is notified by the PingDirectory server of a new alert, it immediately retrieves the base cn=monitor entry of the PingDirectory server. If this entry has a value for the unavailable-alert-type attribute, then the PingDirectoryProxy server will consider it unavailable. If this entry has a value for the degraded-alert-type attribute, then the PingDirectoryProxy server will consider it degraded.
  • Get Root DSE. This health check detects if the root DSE entry exists on the LDAP external server. Since this entry always exists on a PingDirectory server, the absence of the entry suggests that the LDAP external server could be degraded or unavailable.