On 24 May 2006, at 08:46, Frank Bonnet wrote:
Hello
I use freeradius to authenticate Chillispot users using an Openldap backend , everything works like a charm :-)
Another (friendly) site has quite the same configuration they do use freeradius too to authenticate their wi-fi users.
Both sites have a permanent Internet access.
Now is it possible for "my" daemon to "communicate" with another freeradius daemon which is running in another distant site to let all of our users ( my site + distant site ) authenticate transparently with their own site logins/passwds on the two sites ?
Yes, this is possible with "proxy" authentication. You allocate a 'realm' to each site (ie. 'franksite'), and users (typically) append the realm to their username in the format <username>@<realm> (ie. 'frank@franksite'). Take a look at proxy.conf, and google for "freeradius proxy". josh. Josh Howlett, Networking Specialist, University of Bristol. email: josh.howlett@bristol.ac.uk | phone: +44 (0)7867 907076 | interal: 7850