<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.Pr-formataoHTML, li.Pr-formataoHTML, div.Pr-formataoHTML
{mso-style-name:"Pré-formatação HTML";
mso-style-link:"Pré-formatação HTML Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.Pr-formataoHTMLChar
{mso-style-name:"Pré-formatação HTML Char";
mso-style-priority:99;
mso-style-link:"Pré-formatação HTML";
font-family:Consolas;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
p.Textodebalo, li.Textodebalo, div.Textodebalo
{mso-style-name:"Texto de balão";
mso-style-link:"Texto de balão Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.TextodebaloChar
{mso-style-name:"Texto de balão Char";
mso-style-priority:99;
mso-style-link:"Texto de balão";
font-family:"Tahoma","sans-serif";}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle31
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 85.05pt 70.85pt 85.05pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1156531102;
mso-list-type:hybrid;
mso-list-template-ids:414600738 68550671 68550681 68550683 68550671 68550681 68550683 68550671 68550681 68550683;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">#######<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Q: RADIUS Server: any CPU, 4 GB RAM, any disk space / any Linux<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">A: A reasonable amount of Disk space, something like 30GB should be more than sufficient, particularly if your SAN is housing your databases. As for distro, I’m a fan of CentOS 6.2/6.3 or Ubuntu
12.04. I actually have both in production behind load balancers.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">#######<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">#######<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Q: Database Server: any CPU, RAM (???), disk space (???), MySQL / any Linux<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">A: This is just me, but I’d suggest running both MySQL and FreeRADIUS on the same servers if you can keep the actually data off of the server, and on a SAN. This is because in terms of processor,
RAM, and Network IO, MySQL won’t peg the system very hard at all. Of course, if budget is of no consequence, then of course separating out services is always fine. But I like to keep all my DB queries local where I can, especially for network intensive operations.
This will have to be looked at and integrated into your environment based upon your current variables. There are just too many ways to go, and there is no 1 particulary “right way”. (Though some may disagree)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">To touch on this further though, RAM is cheap, and if you house them on the same servers, I’d probably make sure you had 6GB to dedicate to MySQL, and about 2-4GB to the OS. Getting 12GB of
RAM on a system nowadays is nothing, so if you can, I’d do that. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">#######<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">#######<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Q: Additional: SAN to enable database cluster (any tip?)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">A: If you have a SAN Available, it’s pretty straight forward. You will create a volume, carve out a LUN, assign it to the Linux Servers, and then mount the partition to begin using it. Both
of your FreeRADIUS MySQL Servers servers will point to the same data, thereby giving you good speed, a single point of management, as well as great redundancy with the SAN.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">#######<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org [mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org]
<b>On Behalf Of </b>Mauricio Harley<br>
<b>Sent:</b> Thursday, August 16, 2012 3:15 PM<br>
<b>To:</b> FreeRadius users mailing list<br>
<b>Subject:</b> RES: New FreeRADIUS Deployment<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Ok, friends,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Thank you very much for start discussing. Let’s get that more objective.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">RADIUS Server: any CPU, 4 GB RAM, any disk space / any Linux<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Database Server: any CPU, RAM (???), disk space (???), MySQL / any Linux<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Additional: SAN to enable database cluster (any tip?)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Am I right? What would be answers to the question marks?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D">Kind regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Maurício Harley</span></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
<br>
</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Suporte Técnico</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
<br>
</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Cisco IP Phone: +55 (85) 3133-7910</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><br>
</span><b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Auriga Tecnologia & Negócios</span></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
<br>
<br>
</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Cisco</span><b><i><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
</span></i></b><b><i><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray">SILVER</span></i></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy"> Certified Partner</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"> </span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy"><br>
<b>IBM</b> Business Partner</span><span lang="PT-BR" style="font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="PT-BR" style="font-size:12.0pt;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:freeradius-users-bounces+mauricio.brito=auriga.com.br@lists.freeradius.org">
freeradius-users-bounces+mauricio.brito=auriga.com.br@lists.freeradius.org</a> <a href="mailto:[mailto:freeradius-users-bounces+mauricio.brito=auriga.com.br@lists.freeradius.org]">
[mailto:freeradius-users-bounces+mauricio.brito=auriga.com.br@lists.freeradius.org]</a>
<b>Em nome de </b>Julson, Jim<br>
<b>Enviada em:</b> quinta-feira, 16 de agosto de 2012 17:53<br>
<b>Para:</b> FreeRadius users mailing list<br>
<b>Assunto:</b> RE: New FreeRADIUS Deployment<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="PT-BR"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">My message was truncated somehow…</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">For point 1, I was going to just say, the more spindles for the hard drives the better, and a normal amount of RAM, like 4GB or so. You will have a decent amount of IOPS, especially if you go with MySQL. However,
point 2 might take care of that.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org">
freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org</a> <a href="mailto:[mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org]">
[mailto:freeradius-users-bounces+jjulson=marketron.com@lists.freeradius.org]</a> <b>
On Behalf Of </b>Julson, Jim<br>
<b>Sent:</b> Thursday, August 16, 2012 2:24 PM<br>
<b>To:</b> FreeRadius users mailing list<br>
<b>Subject:</b> RE: New FreeRADIUS Deployment</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>What would be recommended server hardware (memory, disk, CPU, …) and software (Linux distribution, kernel version, …)?<o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="color:#1F497D">Anything standard and new will do the trick here. You don’t need “Pie in the sky”, just make sure you have
</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>How could I synchronize both servers’ users? I mean, in the beginning, I’d have two separate /etc/shadow files but this is not scalable. I need to share a single file between both servers. Is it possible? How?<o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="color:#1F497D">Do you have a SAN that you could utilize? For performance, I’d suggest a MySQL Cluster running on something with quite a few spindles. The SAN provides great performance in that arena.
Otherwise, you are looking at having to do a Master/Slave scenario for MySQL DB Replication</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo2"><![if !supportLists]><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Any recommendations to the backup policy?<o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-left:.25in"><span style="color:#1F497D">Just your standard nightly full backups to disk, then to either tape, SAN or offsite storage of some kind.</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Maurício Harley</span></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
<br>
</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Suporte Técnico</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
<br>
</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Cisco IP Phone: +55 (85) 3133-7910</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"><br>
</span><b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Auriga Tecnologia & Negócios</span></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
<br>
<br>
</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy">Cisco</span><b><i><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D">
</span></i></b><b><i><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray">SILVER</span></i></b><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy"> Certified Partner</span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"> </span><span lang="PT-BR" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:navy"><br>
<b>IBM</b> Business Partner</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="PT-BR"> </span><o:p></o:p></p>
<pre><span style="font-size:10.0pt;font-family:"Courier New"">The information contained in this e-mail message may be confidential and<o:p></o:p></span></pre>
<pre><span style="font-size:10.0pt;font-family:"Courier New"">protected from disclosure. If you are not the intended recipient, any<o:p></o:p></span></pre>
<pre><span style="font-size:10.0pt;font-family:"Courier New"">dissemination, distribution or copying is strictly prohibited. If you<o:p></o:p></span></pre>
<pre><span style="font-size:10.0pt;font-family:"Courier New"">think that you have received this e-mail message in error, please notify<o:p></o:p></span></pre>
<pre><span style="font-size:10.0pt;font-family:"Courier New"">the sender immediately by replying to this message and then delete it<o:p></o:p></span></pre>
<pre><span style="font-size:10.0pt;font-family:"Courier New"">from your system.<o:p></o:p></span></pre>
<pre><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New"">The information contained in this e-mail message may be confidential and<o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New"">protected from disclosure. If you are not the intended recipient, any<o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New"">dissemination, distribution or copying is strictly prohibited. If you<o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New"">think that you have received this e-mail message in error, please notify<o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New"">the sender immediately by replying to this message and then delete it<o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New"">from your system.<o:p></o:p></span></pre>
<pre><span lang="PT-BR" style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></pre>
</div>
</body>
</html>
<pre>The information contained in this e-mail message may be confidential and
protected from disclosure. If you are not the intended recipient, any
dissemination, distribution or copying is strictly prohibited. If you
think that you have received this e-mail message in error, please notify
the sender immediately by replying to this message and then delete it
from your system.