<span class="Apple-style-span" style="color: rgb(136, 136, 136); ">Alexander,</span><div><font class="Apple-style-span" color="#888888"><br></font></div><div><font class="Apple-style-span" color="#888888">We have a little different scenario. We have two different instances of web server connecting to two different Radius server such that if one of the radius server not able to connect the webserver, radius client can fail over</font><font class="Apple-style-span" color="#888888"> to another radius server which has a different web-server connecting. Find below is the scenario:<br>
</font></div><div><font class="Apple-style-span" color="#888888"><br></font></div><div> /--W1--\ -- /--- R1 ---\<br> --- C<br> /--W2--\ -- /--- R2 ---\</div><div><br></div><div>--Ankur</div>
<div><br><div class="gmail_quote">On Tue, Aug 9, 2011 at 11:54 PM, Alexander Clouter <span dir="ltr"><<a href="mailto:alex@digriz.org.uk">alex@digriz.org.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Ankur G <<a href="mailto:ankur.g@globallogic.com">ankur.g@globallogic.com</a>> wrote:<br>
><br>
> But If the exposed web-service is down, Radius server simply reject the<br>
> authentication request with the response message as "Access_Rejected".<br>
><br>
> We want Radius server instead of rejecting, simply discard the<br>
> authentication request which will allow the RADIUS *client* to failover to<br>
> another RADIUS server.<br>
><br>
...surely the other RADIUS server the client has listed will also be<br>
unable to process the request as the web service is down?<br>
<br>
If you have multiple web-service instances about, then your<br>
perl/python/exec code should failover to using other instances.<br>
<br>
I find it hard how this situation would help you in practise (W -> web,<br>
R -> RADIUS server, C -> RADIUS client) as surely if R1 is unable to<br>
talk to W, having C failover to R2 is not going to help?<br>
<br>
/--- R1 ---\<br>
W --- --- C<br>
\--- R2 ---/<br>
<br>
If you have W1 and W2, then R1 and R2 should be able to talk to both.<br>
<br>
> So while going through the FreeRadius configuration i came across the section<br>
> in sites-avaliable/default file under "post-auth" section which state that<br>
> "Access-Reject packets are sent through the REJECT sub-section of the<br>
> post-auth section." and is as follow:<br>
><br>
> Post-Auth-Type REJECT {<br>
> # log failed authentications in SQL, too.<br>
> #sql<br>
> attr_filter.access_reject<br>
> }<br>
><br>
> If you think this is the right approach, could you please provide me the sample<br>
> code using which if i could check for the rlm status code and could silently<br>
> discard the responses other than the "RLM_MODULE_OK" and<br>
> "RLM_MODULE_REJECTED.<br>
><br>
<a href="http://wiki.freeradius.org/Modules2#Module+Return+Codes" target="_blank">http://wiki.freeradius.org/Modules2#Module+Return+Codes</a><br>
<br>
RLM_MODULE_FAIL looks like a better option to use, although it will not<br>
give you what you want; but it would enable you to use unlang to perform<br>
other tasks.<br>
<br>
Cheers<br>
<font color="#888888"><br>
--<br>
Alexander Clouter<br>
.sigmonster says: You fill a much-needed gap.<br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</font></blockquote></div><br><br clear="all"><br>-- <br><p style="margin:0in 0in 0pt"><span style="color:#333333"><font><span style="font-size:small">Thanks & Regards,</span></font></span></p>
<p style="margin:0in 0in 0pt"><span style="color:#333333"><font><span style="font-size:small">Ankur Gupta | Consultant-Engineering | GlobalLogic Inc. </span></font><span><span><span style="font-size:small"><br></span></span></span></span><span style="color:#333399"><font><span style="font-size:small"><b>Leaders in Software R&D Services</b></span></font></span></p>
<p style="margin:0in 0in 0pt"><span style="color:#333333"><font><span style="font-size:small">ARGENTINA</span></font></span><span style="color:#333333"><font><span style="font-size:small"> | CHINA | INDIA | ISRAEL | UKRAINE | UK | USA</span></font><span><span style="font-size:small"><br>
</span></span><span><font><span style="font-size:small">Office:</span><span><span style="font-size:small"> </span></span><span style="font-size:small">+91-120-406-2000 x <2486> | Mobile +91-981-061-4704</span></font></span></span></p>
<p style="margin:0in 0in 0pt"><font><span><b><span style="color:#333333"><span style="font-weight:normal"><span style="font-size:small">Fax: +91-120-</span></span><span style="font-weight:normal"><span style="font-size:small">258-5721 </span></span><span><span style="font-weight:normal"><span style="font-size:small"> </span></span></span><span style="font-weight:normal"><span style="font-size:small">| Blog: </span></span><a href="http://blogs.globallogic.com" target="_blank"><span style="font-weight:normal"><span style="font-size:small">blogs.globallogic.com</span></span></a></span></b></span><span style="font-size:small"><span></span></span></font></p>
<p style="margin:0in 0in 0pt"><span style="color:blue"><a title="http://www.globallogic.com/" href="http://www.globallogic.com/" target="_blank"><font color="#0000ff"><span style="font-size:small">www.globallogic.com</span></font></a><span style="font-size:small"><br>
</span></span><span><font><span style="font-size:small">Follow us on </span></font><a href="http://twitter.com/GlobalLogicInc" target="_blank"><font color="#0000ff"><span style="font-size:small">Twitter</span></font></a><font><span style="font-size:small">!</span></font></span><span style="font-size:small"><span lang="FR"></span></span></p>
<p style="margin:0in 0in 0pt"><span style="color:blue"><font><span style="font-size:small"> </span></font></span></p>
<p style="margin:0in 0in 0pt"><i><span style="color:navy"><font><span style="font-size:small">Disclaimer: </span></font><a title="blocked::http://www.globallogic.com/email_disclaimer.txt" href="http://www.globallogic.com/email_disclaimer.txt" target="_blank"><span style="color:navy"><font><span style="font-size:small">http://www.globallogic.com/email_disclaimer.txt</span></font></span></a></span></i></p>
<br>
</div>