RE: How to set properly failover ?

23 Jul 2010

      ...
Date: Fri, 23 Jul 2010 18:45:30 +0200
From:
freeradius-users-bounces+alexandre.chapellon=mana.pf@lists.freeradius.or
g (on behalf of "Jevos, Peter" <Peter.Jevos@oriflame.com>)
Subject: How to set properly failover ?  
To: "FreeRadius users mailing list"
<freeradius-users@lists.freeradius.org>
Hi guys
I'm really trying but it's not easy to find
  somehitng in the documenatiion.
I have 2 modules ntlm_auth_vpn1/2 and I like to do
  failover.
I tried this but I was not sucesfull:
In the modules I have 2 files, ntlm_auth_vpn1 and
  ntlm_auth_vpn2
In the sites-available/default I have:
#  Allow EAP authentication.
eap
ntlm_auth
ntlm_auth_vpn {
group {
ntlm_auth_vpn1 {
reject = 1
ok = return
}
ntlm_auth_vpn2 {
reject = 1
ok = return
}
}
}
In my users file is:
DEFAULT          Auth-Type := ntlm_auth_vpn,
Fall-Through = Yes
What should be the correct syntax ?
Freeradius is great tool , however every step
  forward is like a childbirth : )
What I'm really missing is what should be placed
  where.
I'd really enjoy the new book .  I hope it will be
  released soon : )
Thanks
Pet
________________
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Hi alex, thank you for your mail, helped a lot : )

Now it's working, no idea why and how but working : )

Here is my config:
Users:

DEFAULT          Auth-Type := vpn_auth_name,Huntgroup-Name == "vpn"
                Fall-Through = Yes

Radiusd.conf:
instantiate {

                redundant vpn_auth_name {
                                group {
                        ntlm_auth_vpn1 {
                        reject = 1
                        ok = return
                        }
                        ntlm_auth_vpn2 {
                        reject = 1
                        ok = return
                        }
                }

And the sites-available/default:
Authenticate {
  			vpn_auth_name
		}

Thanks , have a nice day
p	

-----Original Message-----
From:
freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradius.org
[mailto:freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradi
us.org] On Behalf Of alexandre.chapellon@mana.pf
Sent: Friday, July 23, 2010 7:44 PM
To: FreeRadius users mailing list
Subject: Re: How to set properly failover ?

This how I do, but it's not the only way and may not feet your needs:

In radiusd.conf, instantiate a redundant module:
instantiate {
...
      redundant ha_auth_name {
                ntlm_auth_vpn1
                ntlm_auth_vpn2
       }
...
}

In default sites config, section authorize

authorize {
...
      ha_auth_name
...
}

Quite simple and works great here for some other moduls (SQL)
Hope it helps.

---- Message original----
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html