Thanks Alan I've got the desired result (if ldap1 result is fail or notfound continue; if ok then stop) using the stanza below authorize { preprocess chap mschap suffix redundant { ldap1 { fail = 1 noop = 2 notfound = 3 ok = return reject = return userlock = return invalid = return } ldap3 { fail = 1 noop = 2 notfound = 3 ok = return reject = return userlock = return invalid = return } ldap2 { fail = 1 noop = 2 notfound = 3 ok = return reject = return userlock = return invalid = return } ldap4 { fail = 1 noop = 2 notfound = 3 ok = return reject = return userlock = return invalid = return } } } Gary - IT Manager Trinity College, Bristol (http://www.trinity-bris.ac.uk) -----Original Message----- From: Alan DeKok <aland@deployingradius.com> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: unlang and 1st of 4 ldap source fail Date: Fri, 30 Jul 2010 15:39:09 +0200 Alexander Clouter wrote:
Probably better off with failover[1], never got around to sorting it out myself, but it is something like this: ---- modules { ldap ldap1 { [snipped]
ok = return
No. The "ok = return" thing NEVER goes into a "modules" configuration.
authorize { preprocess suffix
redundant { ldap1 ldap3 ldap2 ldap4 }
That's the right one. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html To ensure you receive email from Trinity College into your inbox, please add @trinity-bris.ac.uk to your email safe list (also known as whitelist).