No, that's not what he says. He says libldap has certain functionality. He doesn't say that FreeRADIUS supports this.
Wait, just to make sure I understand, if I have a similar setup to the answer in that SO question, it doesn't failover, or are you saying it doesn't do any load balancing? I'm running FreeRADIUS Version 3.0.20 from the Ubuntu standard repo: freeradius/focal-updates,now 3.0.20+dfsg-3ubuntu0.1 amd64 [installed] So looking closer, I didn't realize/understand there was anything like redundant-load-balance. I see that now. Where does the redundant-load-balance statement go? I.E. I have my list of servers under raidusd.conf > modules > ldap ... Putting in the main conf was for ease of writing puppet/ansible modules to install and maintain radius vs multiple files. So would the redundant-load-balance section go under that? Currently looks like: # MODULE CONFIGURATION modules { $INCLUDE mods-enabled/ ldap { server = 'ldap01.example.net' server = 'ldap02.example.net' server = 'ldap03.example.net' port = 389 base_dn = 'dc=example,dc=net' identity = 'xxxxxxxx' password = xxxxxxxx update { control:Password-With-Header += 'userPassword' control:NT-Password := 'sambaNTPassword' } ... ... Should become: # MODULE CONFIGURATION modules { $INCLUDE mods-enabled/ ldap1 { server = 'ldap01.example.net' port = 389 base_dn = 'dc=example,dc=net' identity = 'xxxxxxxx' password = xxxxxxxx } ldap2 { server = 'ldap02.example.net' port = 389 base_dn = 'dc=example,dc=net' identity = 'xxxxxxxx' password = xxxxxxxx } redundant-load-balance { ldap1 ldap2 } ... ... ?? Apologies if that isn't a clear question. Brantley Padgett The question is not how far. The question is, do you possess the constitution, the depth of faith, to go as far as is needed? -Boondock Saints On Friday, October 7, 2022, 09:05:13 AM CDT, Alan DeKok <aland@deployingradius.com> wrote: On Oct 7, 2022, at 9:58 AM, Elias Pereira <empbilly@gmail.com> wrote:
Arran Cudbard-Bell says it works.
No, that's not what he says. He says libldap has certain functionality. He doesn't say that FreeRADIUS supports this. What's your goal here? If you're going to ignore the documentation and argue endlessly, then I suggest forking FreeRADIUS. You can then fix it to do whatever you want, and you don't need us. if you're not going to fork FreeRADIUS, then it works as documented. Read the documentation. Stop arguing. Stop reading (and misunderstanding) random things you find on the net. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html