That was the conclusion I was coming to as well. Just wanted confirmation from the list. Thanks Alan! -----Original Message----- From: freeradius-users-bounces+troy.rindy=validants.com@lists.freeradius.org [mailto:freeradius-users-bounces+troy.rindy=validants.com@lists.freeradius.o rg] On Behalf Of Alan DeKok Sent: Thursday, January 28, 2010 10:42 AM To: FreeRadius users mailing list Subject: Re: Failover Configuration Troy.Rindy@validants.com wrote:
Send Request to our Corporate Radius Server for Two Factor Auth If the corporate Server is Unavailable, doesn't respond or if the user is not found, then Use Auth-Type LDAP to Authenticate to our local LDAP repository
The server isn't really set up to do that. i.e. "authenticate the user, and if authentication fails, do another authentication.
However, I cannot get them to work together as "Try Corporate first, then local LDAP second".
Try "use local LDAP first", and proxy second. :) If the proxy returns reject, then reject. if LDAP returns reject, then reject. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html