redundant/failover modules

John Doppke John.Doppke at TRW.COM
Tue Jun 2 17:13:24 CEST 2009

I've been reading the docs regarding failover and I'm not sure if the following is correct.  It seems to process an extra query.

group {
     redundant {
     fail = 1
     ok = return
     redundant {

The intent is that if the user is not found in ldap1, then ldap2 is tried.  Ldap2 should be skipped if ldap1 returns ok.  In each block the failover should be tried if the primary doesnt respond.

The failover works, but it seems that the ldap2 is tried even if ldap1 finds the user.  Am I missing something?

-John Doppke

More information about the Freeradius-Users mailing list