Dear Trancefor, thank you for your answer. I am confused by this: Usually four LDAP servers are more than enough to authenticate all the users in the domain, and to provide redundancy in case a LDAP server goes down. This sounds like:"Hey, I will use one LDAP forever, if it goes down, I just will pick the next in the list". Sometimes, larger companies have more than four LDAP servers with distributed environments in which users connect to dedicated LDAP servers. Users may contact LDAP servers that are not one of the four servers, and will try to authenticate to them. So this sounds to me like (if the first statement above is true):"Hey I will use the first LDAP server of the first entry of the authentication sequence. If this authentication fails, I will contact the first LDAP server of the second entry of the authentication profile." Bascially if you have two groups of LDAP servers: Group1: 1,2,3,4 Group2:5,6,7,8 Authentication Sequence: Group1,Group2 Assuming no LDAP server goes down ever: LDAP1 will be contacted and LDAP5 might be contacted, the rest of the server will never be contacted. Am I right here? Kind regards, Rene
... View more
