Matija Levec wrote:
I still can't find solution to my problem in documentation so I'll rephrase the question.
Is it possible to proxy requests in a way analogous to bogus example below?
realm example.com { auth_pool = pool1 { reject = 1 ok = return } auth_pool = pool2 { reject = 1 ok = return } } # Authentication fails only if both pools return reject.
No. An Access-Reject is treated as a reject. Failover *never* occurs on a reject.
I know documentation says "... It proxies packets ONLY when it receives a packet or a re-transmission from the NAS. If the NAS never re-transmits, the proxy never re-transmits, either."
Can someone at least suggest in what direction to look for solution?
Source code patches. Alan DeKok.