Hi Justin,
Thanks for your help. It is a great idea to make several sections for each LDAP server. I will try to configure and test this configuration. Recently I thought that we have to configure some kind of load-balancer for LDAP with an application-level probe which tries to connect to LDAP and bind with specified credentials. But it is not obvious how to configure it, and it may be an additional point of failure.
