[email protected] wrote:
> I can tell that ldap failover config is a FAQ by the number of hits I found
> searching for this, but it seems that many of the config examples are for
> older versions of FreeRADIUS.  In any case, this is what I've tried, but it's
> not working:

  See the FAQ for "it doesn't work".

>       ldap ldap2{
....
>               set_auth_type = yes

  Which will set "Auth-Type := ldap2".  That's probably not what you want.
> This is what I put in sites-enabled/default AND in sites-enabled/inner-tunnel
> (it doesn't look right to me, but it's what I found):
> 
> authorize {
>       preprocess
>               redundant LDAP{
>                       ldap1
>                       ldap2
>                       }

  That looks OK...

>       Auth-Type LDAP {
>               ldap1
>               ldap2
>       }

  That doesn't.  It goes into the "authenticate" section, and you need
add a "redundant" block which wraps the calls to "ldap1" and "ldap2"

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to