[nycbug-talk] External Authentication Implementation in FreeBSD

[Matt Juszczak]

What about "ldapifying" the LDAP servers?  If server1 is LDAP primary and 
server2 is LDAP secondary, should you put nss_ldap/pam_ldap on those 
boxes, have them connect to the local instance, and have it failover to 
files just in case the LDAP process is down?  or should those boxes that 
drive authentication and authorization, etc. be driven by local 
files/system only?