Failover for SQL lookup expansions?

10 Mar 2011

      With freeradius 2.1.10 I can configure failover for SQL lookups like this:

	# in policy.conf
        sql_foo {
            redundant {
                sql_foo_local
                sql_foo_remote
            }
        }

	# in sites-available/foo
        authorize {
            sql_foo
        }

However, it looks like I can't use this redundant module inside a string
expansion:

    authorize {
        update request {
            Huntgroup-Name = "%{sql_foo:SELECT groupname FROM radhuntgroup where nasipaddress='%{NAS-IP-Address}' limit 1}"
        }
    }

    --- Error logged:
    WARNING: Unknown module "sql_foo" in string expansion "%"

How could I get the same level of redundancy for string expansions? Could I
do the expansion multiple times inside a redundant section? I am thinking of
perhaps:

    huntgroup_local {
        update request {
            Huntgroup-Name = "%{sql_foo_local:SELECT groupname FROM radhuntgroup where nasipaddress='%{NAS-IP-Address}' limit 1}"
        }
    }

    huntgroup_remote {
        update request {
            Huntgroup-Name = "%{sql_foo_remote:SELECT groupname FROM radhuntgroup where nasipaddress='%{NAS-IP-Address}' limit 1}"
        }
    }

    ...

    authorize {
        redundant {
            huntgroup_local
            huntgroup_remote
        }
    }

However, I'm just not sure whether the ok/notfound/fail status would
propagate through a string expansion in this case.  The examples in
configurable_failover.rst talk only about normal modules.

Thanks,

Brian.

Failover for SQL lookup expansions?

Brian Candler