EAP, how to management-interfaces with multiple or fail-over security-realm(s)

I have a working configuration for the native-interface and http-interface, with ldap login.

But I want a second or even more security-realm as fail-over, with user/password.

How do I configure that?