Redundant LDAP Servers

Jason Traeden jtraeden at overstock.com
Fri May 2 18:37:51 CEST 2008




On 5/2/08 9:45 AM, "Alan DeKok" <aland at deployingradius.com> wrote:

> Jason Traeden wrote:
>> I am running freeradius version 2.0.4 and using LDAP against Active
>> Directory. When I have a single LDAP server setup my authentication works
>> great. I am having trouble using the redundant ldap settings.
> ...
>> authenticate {
> ...
>>     Auth-Type LDAP {
> 
>   If many people are setting redundant LDAP modules *inside* of
> Auth-Type LDAP, and *not* referencing the module elsewhere, that can be
> done.
> 
>   Try the attached patch.  If it works, I'll commit it.
> 
>   Alan DeKok.
> Index: src/modules/rlm_ldap/rlm_ldap.c
> ===================================================================
> RCS file: /source/radiusd/src/modules/rlm_ldap/rlm_ldap.c,v
> retrieving revision 1.194
> diff -u -r1.194 rlm_ldap.c
> --- src/modules/rlm_ldap/rlm_ldap.c 17 Apr 2008 07:59:21 -0000 1.194
> +++ src/modules/rlm_ldap/rlm_ldap.c 2 May 2008 15:49:06 -0000
> @@ -456,6 +456,12 @@
> */
> if (inst->set_auth_type) {
> DICT_VALUE *dv = dict_valbyname(PW_AUTH_TYPE, xlat_name);
> +
> +  /*
> +   * No section of *my* name, but maybe there's an
> +   * LDAP section...
> +   */
> +  if (!dv) dv = dict_valbyname(PW_AUTH_TYPE, "LDAP");
> if (!dv) {
> DEBUG2("rlm_ldap: Over-riding set_auth_type, as there is no module %s listed
> in the \"authenticate\" section.", xlat_name);
> inst->set_auth_type = 0;
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Ok I patched my box with this ldap.c.diff and I still have the same results.


Thanks

Jason




More information about the Freeradius-Users mailing list