[EXT] Multiple LDAP servers best practice

[Alan DeKok]

On Feb 15, 2023, at 3:59 PM, Tony Skalski via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> Thanks for the ideas! I am curious, say I start FR and I have 4 connections
> open to 4 unique ldap servers (start = 4), what methodology does FR use to
> select a connection to use?

  It tries to use the same one over and over.  The reason is that it's likely to be faster.

  If that one is in use, it picks the next-most recently used.

> Notwithstanding issues with the LDAP servers, given I have "min = 3", I
> would expect there to be a minimum of 3 connections at all times, correct?'

  Mostly.  If you also set "idle_timeout", it will close connections.

> Are there any scenarios where FR will violate that? We had a wireless
> outage this morning and when I first checked I noticed there were 0
> connections to our ldap servers - it wasn't an LDAP outage as other
> services did not have any issues. An FR restart got FR reconnected.

  I haven't seen that.  Are you using 3.2.1?

  Alan DeKok.