El 4/3/20 a las 16:16, Alan DeKok escribió:
On Mar 4, 2020, at 9:53 AM, Alejandro Perez-Mendez <alex.perez-mendez@JISC.AC.UK> wrote:
In v3 we've got the rlm_realm module, which we use for the Trust Router protocol, which is somewhat a dynamic discovery mechanism. Would it be very difficult to add another discovery mechanism there? The issue is DNS lookups. We would need to do them via some async method, otherwise the server just shuts down.
That's right, but for the TR we make this sync anyway, and it works good enough, since the blocking method only happens once per realm during the first attempt. Just mentioning that for providing a just-works solution it might be an approach to take into account.
The internals of v4 are 100% async, so this is almost trivial to do there. In v3, it's just a lot more complex.
Agreed. But for v3 it could be synchronous. Best
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Alejandro Perez-Mendez Technical Specialist (AAA), Trust & Identity Skype alejandro_perez_mendez jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800. For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice