<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.30.2">
</HEAD>
<BODY>
<BR>
Le vendredi 23 juillet 2010 à 20:09 +0200, Jevos, Peter a écrit :
<BLOCKQUOTE TYPE=CITE>
<PRE>
Hi alex, thank you for your mail, helped a lot : )
Now it's working, no idea why and how but working : )
Here is my config:
Users:
DEFAULT Auth-Type := vpn_auth_name,Huntgroup-Name == "vpn"
Fall-Through = Yes
</PRE>
</BLOCKQUOTE>
Setting Auth-Type is discouraged. further more setting <BR>
Auth-Type to a module name sounds like an error to me (but maybe am i mistaking)<BR>
<BR>
I think you can remove Auth-Type
<BLOCKQUOTE TYPE=CITE>
<PRE>
Radiusd.conf:
instantiate {
redundant vpn_auth_name {
group {
ntlm_auth_vpn1 {
reject = 1
ok = return
}
ntlm_auth_vpn2 {
reject = 1
ok = return
}
}
</PRE>
</BLOCKQUOTE>
Why are you using group inside redundant... I'm not sure this is usefull.<BR>
Using ntlm_auth_vpn1 and ntlm_auth_vpn2 should be enough. Look here for more infos and example of how redundant modules are set:<BR>
<BR>
<A HREF="http://wiki.freeradius.org/Fail-over">http://wiki.freeradius.org/Fail-over</A>
<BLOCKQUOTE TYPE=CITE>
<PRE>
And the sites-available/default:
Authenticate {
vpn_auth_name
}
Thanks , have a nice day
p
-----Original Message-----
From:
<A HREF="mailto:freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradius.org">freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradius.org</A>
[<A HREF="mailto:freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradi">mailto:freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradi</A>
us.org] On Behalf Of <A HREF="mailto:alexandre.chapellon@mana.pf">alexandre.chapellon@mana.pf</A>
Sent: Friday, July 23, 2010 7:44 PM
To: FreeRadius users mailing list
Subject: Re: How to set properly failover ?
This how I do, but it's not the only way and may not feet your needs:
In radiusd.conf, instantiate a redundant module:
instantiate {
...
redundant ha_auth_name {
ntlm_auth_vpn1
ntlm_auth_vpn2
}
...
}
In default sites config, section authorize
authorize {
...
ha_auth_name
...
}
Quite simple and works great here for some other moduls (SQL)
Hope it helps.
---- Message original----
>Date: Fri, 23 Jul 2010 18:45:30 +0200
>From:
<A HREF="mailto:freeradius-users-bounces+alexandre.chapellon=mana.pf@lists.freeradius.or">freeradius-users-bounces+alexandre.chapellon=mana.pf@lists.freeradius.or</A>
g (on behalf of "Jevos, Peter" <<A HREF="mailto:Peter.Jevos@oriflame.com">Peter.Jevos@oriflame.com</A>>)
>Subject: How to set properly failover ?
>To: "FreeRadius users mailing list"
<<A HREF="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</A>>
>
> Hi guys
>
>
>
> I'm really trying but it's not easy to find
> somehitng in the documenatiion.
>
> I have 2 modules ntlm_auth_vpn1/2 and I like to do
> failover.
>
> I tried this but I was not sucesfull:
>
>
>
> In the modules I have 2 files, ntlm_auth_vpn1 and
> ntlm_auth_vpn2
>
> In the sites-available/default I have:
>
>
>
> # Allow EAP authentication.
>
> eap
>
> ntlm_auth
>
>
>
> ntlm_auth_vpn {
>
> group {
>
>
> ntlm_auth_vpn1 {
>
>
> reject = 1
>
>
> ok = return
>
>
> }
>
>
> ntlm_auth_vpn2 {
>
>
> reject = 1
>
>
> ok = return
>
>
>
> }
>
> }
>
> }
>
>
>
> In my users file is:
>
>
>
> DEFAULT Auth-Type := ntlm_auth_vpn,
>
> Fall-Through = Yes
>
>
>
> What should be the correct syntax ?
>
> Freeradius is great tool , however every step
> forward is like a childbirth : )
>
> What I'm really missing is what should be placed
> where.
>
>
>
> I'd really enjoy the new book . I hope it will be
> released soon : )
>
>
>
> Thanks
>
>
>
> Pet
>________________
>-
>List info/subscribe/unsubscribe? See
<A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A>
-
List info/subscribe/unsubscribe? See
<A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A>
-
List info/subscribe/unsubscribe? See <A HREF="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A>
</PRE>
</BLOCKQUOTE>
<BR>
</BODY>
</HTML>