redundant-load-balance

[Alan DeKok]

On Jan 4, 2017, at 10:14 AM, Jonathan Gazeley <Jonathan.Gazeley at bristol.ac.uk> wrote:
> Yes, we are using SSL. We're using the standard OpenLDAP package distributed with CentOS 7, which is built against libnss. Obviously I prefer to rebuild as little of the system as possible but I'm open to the idea of rebuilding OpenLDAP against OpenSSL if necessary.

  I would say it's necessary.  libnss has wrappers for OpenSSL functions, which means FreeRADIUS *may* accidentally use nss functions where it expects OpenSSL, or vice versa.

  Alan DeKok.