Description of problem:

Currently OpenShift configuration only allows for pointing at a single authentication server.  

There is an elaborate workaround as described in both links below.

But a proxy shouldn't be necessary to make up for the platform being unable to reference two ldap servers.  

LDAP config:
https://docs.openshift.com/container-platform/3.6/install_config/configuring_authentication.html#LDAPPasswordIdentityProvider

Auth proxy workaround for HA:
https://docs.openshift.com/container-platform/3.6/install_config/advanced_ldap_configuration/sssd_for_ldap_failover.html#setting-up-for-ldap-failover


There is a expectation to be able to provide multiple ldap servers to an ldap client.  A proxy in the middle to provide HA feels like a workaround while you solve the actual client side issue.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info: