Dustin, thank you very much for this! It works like a charm, even though it is quite ugly... -JP On Fri Dec 10 2004 at 20:58:59 CET, Dustin Doris wrote: ...

However, when I am using redundant, I cannot have this redundancy for Ldap-Group lookups. It appears that for Ldap-Group lookups, only the last ldap instance that I create (ldap2) is actually used for Ldap-Group lookups. If I take down ldap1, I can still authenticate. I get the redundancy of ldap2 for autz and auth. However, if I put ldap1 back up and take down ldap2, I get a failure because I cannot lookup the Ldap-Group, so it falls through to the reject statement.

So, reading through configurable failover, I tried instantiating both ldap1 and ldap2. This was neat, because I could specify ldap1-Ldap-Group or ldap2-Ldap-Group. ...