Distributed fault tolerant control of a two-tanks system