<![CDATA[LDAP with secondary domain controller]]>Let us say we have a PDC on our domain ad.example.com. SquidGuard authentication query uses something like ldap://192.168.1.1 which is the IP of PDC. If we have a secondary domain controller (setup to serve global catalog and all that) which takes over in case PDC is not available, how squidguard (or any other package/feature) can make use of it?

Will manual DNS entries help? E.g. if we setup a DNS entry for ad.example.com which can be resolved to 192.168.1.1 (the PDC) and 192.168.1.2 (secondary DC), and then change the ldap query URI to ldap://ad.example.com, will it work?

This is a hypothetical question/situation. I don't have any means of testing it at the moment; but I am merely curious if this is the way to do it.

Thx

]]>https://forum.netgate.com/topic/70450/ldap-with-secondary-domain-controllerRSS for NodeFri, 12 Jun 2026 02:29:08 GMTFri, 20 Jun 2014 06:04:21 GMT60