Freeradius and 2 ldap servers.

[Terry J Fike Jr]

Okay, since this isn't easy to piece together from the docs. (and no one 
has posted this on the mailing list that i've seen, and i've gotten a 
few emails on this as well)

here is how i got freeradius running good failover with 2 ldap servers.
hopefully those who know the system better than me will let me/us (the 
list) know if i've done something wrong here.

in the ldap section you'll have:
ldap ldap1 {
  server = <ip>
  identity = <>
  ...
}

  ldap ldap2 {
  <second server info>
}

then in the instantiate section put
ldap1
ldap2

then in authorize you'll have:

redundant {
   ldap1
   ldap2
}

and in authenticate you'll have:

  Auth-Type LDAP {
    redundant {
      ldap1
      ldap2
    }
  }


that is what worked for me.
now one thing to consider/think about.  it appears whichever server is 
listed secondly (in instantiate, authorize, and authenticate, will be 
hit first)  not sure why this is...and it may not be important
-- 
Terry J Fike Jr
System Administrator
MTA Solutions
907-793-4100
tfike at mtasolutions.com