How to catch Ldap-Group fail state

Alan DeKok aland at deployingradius.com
Tue Jun 8 14:57:06 CEST 2021


> On Jun 8, 2021, at 2:50 AM, Sergey Nikitin <oldnick.ru at gmail.com> wrote:
> Could you help me please: is there a way to catch Ldap-Group failed state?

  Unfortunately, no.

> Problem is when ldap server becomes unreachable from radius server, radius
> client receive reject and I would like not to send reply in such case.

  The better solution is to make sure that the LDAP server is always up.

  If the LDAP server is needed in order for RADIUS to work, then there's no reason for the LDAP server to be down, or unreachable.  That is a catastrophic problem which should be fixed immediately.

  Alan DeKok.




More information about the Freeradius-Users mailing list