<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><span lang="EN-US">Hello,</span><BR><span lang="EN-US">i`m
 running a Freeradius Server 2.1.12 on a  Ubuntu 13.04 VM. The Login 
with 802.1 works perfectly. I`m using a Windows LDAP Server for the 
Login and want to add a second LDAP-Server for a Fail Over. I`m 
following the Tutorials to setup my Freeradius Server: *<b><a href="http://deployingradius.com/" target="_blank">Click</a></b>*. I`cant find a suitable Tutorial to adding a second LDAP Server for a Fail Over. </span><span><span lang="EN">Which files</span></span><span lang="EN"> <span>are</span> <span>responsible</span> <span>for the</span> <span>integration of a second</span> <span>LDAP</span> <span>server</span>? </span>These are my current Settings:<BR>

 <BR><b>/etc/freeradius/modules/ldap</b>:<BR> <BR><span lang="EN-US">ldap <b>ldap1</b> {</span><BR><span lang="EN-US">                server = "serv01.xyz.local"</span><BR>

<span lang="EN-US">                basedn = "dc=xyz,dc=local"</span><BR><span lang="EN-US">                filter = "(uid=%{%{Stripped-User-Name}:<wbr>-%{User-Name}})"</span><BR>
<span lang="EN-US">                ldap_connections_number = 5</span><BR><span lang="EN-US">                timeout = 4</span><BR><span lang="EN-US">                timelimit = 3</span><BR>

<span lang="EN-US">                net_timeout = 1</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                tls {</span><BR>
<span lang="EN-US">                               start_tls = no</span><BR><span lang="EN-US">                }</span><BR><span lang="EN-US">                dictionary_mapping = ${confdir}/ldap.attrmap</span><BR>

<span lang="EN-US">                edir_account_policy_check = no</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                set_auth_type = no</span><BR>
<span lang="EN-US">                keepalive {</span><BR><span lang="EN-US">                               # LDAP_OPT_X_KEEPALIVE_IDLE</span><BR><span lang="EN-US">                               idle = 60</span><BR>

<span lang="EN-US"> </span><BR><span lang="EN-US">                               # LDAP_OPT_X_KEEPALIVE_PROBES</span><BR><span lang="EN-US">                               probes = 3</span><BR>

<span lang="EN-US"> </span><BR><span lang="EN-US">                               # LDAP_OPT_X_KEEPALIVE_INTERVAL</span><BR><span lang="EN-US">                               </span>interval = 3<BR>

                }<BR>}<BR> <BR><span lang="EN-US">ldap <b>ldap2</b> {</span><BR><span lang="EN-US">                server = "serv02.xyz.local"</span><BR>

<span lang="EN-US">                basedn = "dc=xyz,dc=local"</span><BR><span lang="EN-US">                filter = "(uid=%{%{Stripped-User-Name}:<wbr>-%{User-Name}})"</span><BR>
<span lang="EN-US">                ldap_connections_number = 5</span><BR><span lang="EN-US">                timeout = 4</span><BR><span lang="EN-US">                timelimit = 3</span><BR>

<span lang="EN-US">                net_timeout = 1</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                tls {</span><BR>
<span lang="EN-US">                               start_tls = no</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                }</span><BR><span lang="EN-US"> </span><BR>

<span lang="EN-US">                dictionary_mapping = ${confdir}/ldap.attrmap</span><BR><span lang="EN-US">                edir_account_policy_check = no</span><BR>
<span lang="EN-US">                set_auth_type = no</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                keepalive {</span><BR><span lang="EN-US">                               # LDAP_OPT_X_KEEPALIVE_IDLE</span><BR>

<span lang="EN-US">                               idle = 60</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                               # LDAP_OPT_X_KEEPALIVE_PROBES</span><BR>

<span lang="EN-US">                               probes = 3</span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">                               # LDAP_OPT_X_KEEPALIVE_INTERVAL</span><BR>

<span lang="EN-US">                               </span>interval = 3<BR>                }<BR>}<BR> <BR><b>/etc/samba/smb.conf</b>:<BR>
 <BR>[global]<BR>workgroup = XYZ<BR> dns proxy = no<BR> <BR>  security = ads<BR>
                <span lang="EN-US">password server = serv01.xyz.local </span><BR><span lang="EN-US">                password server = serv02.xyz.local</span><BR><span lang="EN-US">winbind separator = +</span><BR>

<span lang="EN-US"> </span><BR><span lang="EN-US"> </span><BR><b><span lang="EN-US">/etc/freeradius/sites-enabled/<wbr>inner-tunnel:</span></b><BR>
<span lang="EN-US"> </span><BR><span lang="EN-US">authenticate {</span><BR><span lang="EN-US">ntlm_auth</span><BR><span lang="EN-US"></span><BR>
<span lang="EN-US"> </span><BR><span lang="EN-US"> </span><BR><span lang="EN-US">/<b>etc/freeradius/sites-enabled/<wbr>default:</b></span><BR><span lang="EN-US"> </span><BR>
<span lang="EN-US">authenticate {</span><BR><span lang="EN-US">ntlm_auth</span><BR><span lang="EN-US"></span><BR><span lang="EN-US"> </span><BR>
<b><span lang="EN-US">/etc/freeradius/users:</span></b><BR><span lang="EN-US">DEFAULT                       <wbr>      Auth-Type = ntlm_auth</span><BR><span lang="EN-US"> </span><BR>
<span lang="EN-US">Thanks for Help!</span><BR><span lang="EN-US">BeliarsFire</span><BR>                                           </div></body>
</html>