multiple hosts entries for AD authentication

Client auth, or admin auth?

 

 

AFAIK, the only way to auth LTM with ACA (Advanced Client Authentication) module includes PAM (Pluggable Auth Module), and that is pretty flexible config-wise.

 

 

For admin auth using AD, it looks like you can specify a hostname OR an IP for Host, and it is retained in the config file as a name instead of resolving to an IP. Since that's the case, you can use a hostname that resolves to multiple IP addresses.

 

 

Better yet, you could use a service (like GTM) that hands out only one known good address with a short TTL, and minimize local visibility of failure.

 

 

HTH

 

/deb