Multiple LDAP failover issue

[Alan DeKok]

On May 1, 2019, at 11:23 AM, Satish Patel <satish.txt at gmail.com> wrote:
> 
> I have freeradius configure with LDAP servers and so far everything is
> working great but today when i have added second ldap server i got
> following error
> 
> I have created two ldap file as per document ldap1 & ldap2 and my
> authorization and authentication section look like following.
> ...
> when i start radiusd -X it failed here
> 
> reading pairlist file /etc/raddb/mods-config/files/authorize
> /etc/raddb/mods-config/files/authorize[48]: Parse error (check) for
> entry DEFAULT: Unknown name "Ldap-Group"
> Failed reading /etc/raddb/mods-config/files/authorize
> /etc/raddb/mods-enabled/files[9]: Instantiation failed for module "files"

  Yes.

> but when i changed Ldap-Group to ldap1-LDAP-Group  it works do does
> that means i have to create two section in users file for two LDAP?
> 
> ldap1-LDAP-Group
> ldap2-LDAP-Group

  The LDAP-Group checks are *not* done in a redundant fashion.  So yes, you will need two group checks.

  Alan DeKok.