Active Directory group check via winbind + rlm_unix, not LDAP

Phil Mayers p.mayers at imperial.ac.uk
Mon Sep 1 14:20:25 CEST 2014


On 01/09/14 12:42, A.L.M.Buxey at lboro.ac.uk wrote:

> no. it rarely falls over nicely to the next server. winbindd is rubbish
> (i know, we use it)

We find it does fail over, but it's slow to detect a dead server - tens 
of seconds, which is too slow to be useful in a wireless environment 
with high client and reauth counts.


More information about the Freeradius-Users mailing list