Active Directory group check via winbind + rlm_unix, not LDAP

[Phil Mayers]

On 01/09/14 12:42, A.L.M.Buxey at lboro.ac.uk wrote:

> no. it rarely falls over nicely to the next server. winbindd is rubbish
> (i know, we use it)

We find it does fail over, but it's slow to detect a dead server - tens 
of seconds, which is too slow to be useful in a wireless environment 
with high client and reauth counts.