Hi yes basically i need to add 2 ldap servers to radius server. if one ldap server fails radius server should be able to authenticate from other ldap server , can you guys guide what configurations that i need to used to achieve that Thanks john On 22 April 2014 22:48, Michael Monette <mmonette@2keys.ca> wrote:

Redundancy?

Am I missing something?

----- Original Message ----- From: "Arran Cudbard-Bell" <a.cudbardb@freeradius.org> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org

...

Sent: Tuesday, April 22, 2014 10:49:01 AM Subject: Re: multiple ldap servers in freeradius

On 22 Apr 2014, at 15:41, val john <valjohn1647@gmail.com> wrote:

...

Hi Guys

Is it possible to add multiple ldap servers in freeradius configuration

You're crazy, why would you ever want to talk to more than one of anything?!

Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

On 22/04/2014 18:18, Michael Monette wrote:

Redundancy?

Am I missing something?

I think it was an attempt at humour ;o)

On 22 Apr 2014, at 18:37, Matt Zagrabelny <mzagrabe@d.umn.edu> wrote:

On Tue, Apr 22, 2014 at 12:18 PM, Michael Monette <mmonette@2keys.ca> wrote:

...

Redundancy?

Am I missing something?

Arran was making a joke. One could interpret his response as:

"Of course it is possible to add multiple ldap servers".

Alan responded with the config incantations.

;) It's just the question has been asked so many times, I find it hard to believe the answer isn't sitting in one of the googlable mail archives. Here's the more complete answer: There are actually multiple ways you can achieve redundancy with LDAP. The way Alan suggested will open two pools of connections to the two LDAP servers. You can then add them to a redundant or load balance stanza to fail between or distribute requests between the pools. Something like: redundant { foo bar } The other way of doing it is to just list multiple servers in the 'server' config item. ldap { server = "server1.example.org server2.example.org" } Here libldap will handle failover. The way Alan described will provide smoother failover, at the expense of a slightly more complicated config. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2