Running Free Radius 2.1.7 against a Novell eDirectory LDAP Database.<br><br>We're using Dynamic Clients for approx 1200 NAS element devices and looking up the Elements in our LDAP database.<br><br>Even though we have ldap_connections_number = 50 in the modules/ldap we have issues with the dynamic clients. We can increase the number higher but it doesn't seem to make any difference.<br>
<br>Each element sends a heartbeat packet to FR once a second to make sure it's still alive which we capture very early on in the authorize second and send a reject.<br><br>When we restart FreeRadius and since the LDAP server takes about 30 ms to reply to the dynamic client lookup any other heartbeat requests get rejected as unknown clients.<br>
<br>Is the newer versions of FreeRadius use the multiple connections of ldap in a more efficient way so that the client lookups work more effectively.<br><br>Our dynamic clients config is:<br><br>server dynamic_client_server {<br>
authorize {<br> if ("%{ldap:ldap:///ou=Elements,o=Identities?ou?sub?cn=%{Packet-Src-IP-Address}}") {<br> update control {<br> FreeRADIUS-Client-IP-Address = "%{Packet-Src-IP-Address}"<br>
FreeRADIUS-Client-Shortname = "%{ldap:ldap:///ou=Elements,o=Identities?l?sub?cn=%{Packet-Src-IP-Address}}"<br> FreeRADIUS-Client-NAS-Type = "other"<br> FreeRADIUS-Client-Secret = "%{ldap:ldap:///ou=Elements,,o=Identities?ou?sub?cn=%{Packet-Src-IP-Address}}"<br>
}<br> }<br> ok<br> }<br>}<br><br>Is the dynamic clients ldap lookups only single threaded, or have I done something incorrect with the configuration?<br>