ldap a {
add the "set_auth_type = yes" option to all 3 ldap modules, and probably call them something more descriptive for reasons which will become clear below e.g.
modules { ldap ldap-a { .. set_auth_type = yes } }
authorize {
You can probably do this: authorize { redundant { a b c } } ...which will stop processing when the first LDAP module matches
authenticate {
When an LDAP module is "named" as opposed to anonymous and "set_auth_type = yes" the Auth-Type gets set to the module name so do this:
authenticate { Auth-Type ldap-a { ldap-a } Auth-Type ldap-b { ldap-b } } That should work. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html