Active Directory group check via winbind + rlm_unix, not LDAP

Phil Mayers p.mayers at
Mon Sep 1 14:20:25 CEST 2014

On 01/09/14 12:42, A.L.M.Buxey at wrote:

> no. it rarely falls over nicely to the next server. winbindd is rubbish
> (i know, we use it)

We find it does fail over, but it's slow to detect a dead server - tens 
of seconds, which is too slow to be useful in a wireless environment 
with high client and reauth counts.

More information about the Freeradius-Users mailing list