Hello Erwin -

On Thu, 18 Nov 1999, Erwin Wortel wrote:
> Hi,
> 
> We are using LDAP-authentication with Radiator. This works fine !
> For backup reasons I've the following question :
> Is it possible to define a second ldap host which Radiator contacts
> when the (primary) ldap does not give any reply. (And if so, how :-)?
> 

You can define two AuthBy LDAP clauses with an AuthByPolicy:

# Handler with chained AuthBy LDAP or LDAP2 clauses

<Handler ....>
        AuthByPolicy ContinueUntilAccept

        <AuthBy LDAP>
                ....
        </AuthBy>

        <AuthBy LDAP>
                ....
        </AuthBy>
</Handler>


If you have multiple Handlers, you might prefer to define the AuthBy LDAP
clauses once only with Identifiers, the refer to them by name:

# AuthBy LDAP clauses using Identifiers

<AuthBy LDAP>
        Identifier Primary-LDAP-Server
        .....
</AuthBy>

<AuthBy LDAP>
        Secondary-LDAP-Server
        .....
</AuthBy>

<Handler ....>
        AuthByPolicy ContinueUntilAccept

        AuthBy Primary-LDAP-Server

        AuthBy Secondary-LDAP-Server
</Handler>

hth

Hugh

--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody

===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to