We are currently using CAS for multiple directory authentication. AD for internal users, AD LDS for external users. I've read that NLB is a possible solution, but wondering if this is possible with SRV records, and how about you would correctly configure that. With our AD directory, I can bind with olddomain.local, and hit any of the DCs in the domain. We don't want to hardcode servernames into CAS, so the end goal is to bind with LDSdomain.gov.

nslookup -type=srv _ldap._tcp.LDSdomain.gov

returns

_ldap._tcp.LDSdomain.gov SRV service location:
      priority       = 0
      weight         = 100
      port           = 1025
      svr hostname   = server01
_ldap._tcp.LDSdomain.gov SRV service location:
      priority       = 0
      weight         = 200
      port           = 1025
      svr hostname   = server02