<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, Sep 1, 2014 at 4:22 PM, Daren Hendricks <span dir="ltr"><<a href="mailto:daren.hendricks@gmail.com" target="_blank">daren.hendricks@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>Thank you,I have looked into using <span style="font-family:arial,sans-serif;font-size:13px">rlm_replicate but I do not seem to be coming right. Below is what's in proxy.conf</span></div>
<div><br></div><div><br></div><div><div>home_server rad01 {</div><div> type = acct</div><div> ipaddr = 192.168.25.126</div><div> port = 1813</div><div> secret = testing123</div><div>}</div><div>
<br></div><div>home_server_pool otp0 {</div><div> home_server = otp1</div><div> home_server = rad01</div><div>}</div><div>home_server_pool acc1 {</div><div> home_server = rad01</div><div> </div>
<div>}</div><div>realm acc_realm {</div><div> act_pool = acc1</div><div>}</div><div><br></div></div></div><div class="gmail_extra"><br></div></blockquote><div><br></div><div><br></div><div>... and did you call "replicate" on your accounting section?</div>
<div>Did you set Replicate-To-Realm before calling "replicate"?</div><div><br></div><div>See <a href="https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/raddb/modules/replicate">https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/raddb/modules/replicate</a></div>
<div><br></div><div>-- <br></div><div>Fajar</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Tue, Aug 26, 2014 at 11:53 AM, Fajar A. Nugraha <span dir="ltr"><<a href="mailto:list@fajar.net" target="_blank">list@fajar.net</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><div class="h5"><div dir="ltr"><div class="gmail_extra">
<div class="gmail_quote"><div>On Tue, Aug 26, 2014 at 3:28 PM, Daren Hendricks <span dir="ltr"><<a href="mailto:daren.hendricks@gmail.com" target="_blank">daren.hendricks@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Hi Everyone,<div><br></div><div>We have 2 radius servers (v2.2.1) a primary and secondary. Currently both use same mysql database that lives on the primary server. For HA sake we would like to have the following setup. The primary server will read/write to it's radius DB and that will be replicated using mysql replication to the secondary server. The secondary server will then read/write to the replicated db and forward/proxy it's accounting data to the primary server. </div>
<div>Does this sound like a feasible solution? </div></div></blockquote><div><br></div></div><div>No.</div><div><br></div><div>You should either:</div><div>- replicate the packets at radius level, and have each radius write (both packets that it received directly and the forward packets) to its own db. OR</div>
<div>- use active-active db replication (e.g. galera)</div><div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr"><div>Also, what can we use to forward the accounting data to the primary server, would robust-proxy-accounting be something worth looking into?</div><div><br></div></div></blockquote><div><br></div></div><div>
Depends on your need. robust-proxy-accounting should work, but on some setup it might end up filling the disk (e.g. when bad home server rejects some packets).</div>
<div><br></div><div>Personally I prefer rlm_replicate, which is very fast but might lose some accounting packets due to it's send-and-forget menchanism (I'm fine with that).</div><span><font color="#888888"><div>
<br></div><div>-- </div><div>
Fajar</div></font></span></div></div></div>
<br></div></div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div>
<br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div></div>