I changed the config on director.mcs.anl.gov to proxy connections between our 2 auth servers, mirroring the CIS cryptocard setup - and taking the load balancer out of the loop. If you manage systems that use cryptocard auth, please make sure they are configured for 2 authentication servers: auth.mcs.anl.gov auth2.mcs.anl.gov I have an example proxy.conf for freeradius with failover setup, if anyone needs it. ---- Daniel Murphy-Olson Systems Administrator Mathematics & Computer Science Division Argonne National Laboratory 630-252-0055