Axel Seguin <axel.seguin@icfo.es> wrote:
My Radius sends the request 5 times to the other Radius server and then gives up marking the server dead (but it is not).
Then why isn't it responding? Are there firewall rules that filter out the response or request?
Why is there a "Module-Failure-Message = "rlm_ldap: User not found""? Of course the user won't be found in the local ldap database since this realm is supposed to be proxied.
Then why did you configure the server to look the user up in LDAP? It doesn't come configured to do that by default, so you must have added that to your local config.
The radius server is obviously looking in the local ldap database with the unstriped username before proxying this request. Is there not a way, in case the realm of the username has to be proxied not to look for it locally in the ldap database fisrt?
Yes. See doc/configurable_failover && doc/Autz-Type
If anyone has an idea why i don't get any answer, i would be gratefull.
Use 'tcpdump' to see where the packets are going. See if you can run 'radclient" on the same machine as the RADIUS server, and get a response from the other server. Alan DeKok.