On Jul 26, 2011, at 4:36 PM, Alan DeKok wrote:
Charles Plater wrote:
Is there any way to try multiple realms inside an update control statement? What I want to do is try proxying to one realm, and if that fails trying the credentials via the local ream. Thanks in advance.
Read raddb/proxy.conf. Look for the home server pool section.
This works, and is documented.
If I'm reading raddb/proxy.conf correctly home_server_pool allows for fail-over and load-balancing configurations. In my case I was to try the same credentials against multiple servers. I'm currently using this bit of unlang to send some requests to another radius server: if (User-Name !~ /^..[0-9][0-9][0-9].*$/) { update control { Proxy-To-Realm := 'med.wayne.edu' } } What I'm looking at doing is to retry failed proxy attempts locally. Is this possible? -- Charles Plater Lead Application Technical Analyst Internet Services +1-313-577-4620 ab3189@wayne.edu