Load-balancing LDAP

[Matthew Newton]

On Thu, Jul 14, 2016 at 03:44:42PM +0100, Jonathan Gazeley wrote:
> So I want to start using FreeRADIUS's redundant-load-balance section[2] but
> at the moment I can't see how to use this with the xlat style of calling the
> ldap module. Can I do something like wrap it in a policy and load-balance
> between policies?

As I learnt on github PR#1642 the other day...

See radiusd.conf instantiate{}.

https://github.com/FreeRADIUS/freeradius-server/blob/v3.1.x/raddb/radiusd.conf.in#L725-L758

Personally I'd probably set up Linux IPVS for the LDAP service
instead, but that's just from experience of the number of times
I've seen all sorts LDAP clients break when one of their
supposedly redundant servers goes away.

Matthew



-- 
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>