I suspect the answer will be "patches welcome" but... Has anyone ever thought of having a similar module as dynamic clients where you can pull proxies for external realms from an external source using unlang such as sql or ldap?? I have an interesting use case where I am looking to replace an existing radius proxy server with FreeRadius that has a lot of downstream proxies. So far the the best option I have is to copy the proxies.conf across all the instances and HUP the config whenever a new realm is added or removed and wondered if there was a smarter way to do it. Cheers Peter
On Jul 16, 2015 8:52 AM, "Arran Cudbard-Bell" <a.cudbardb@freeradius.org> wrote:
On Jul 15, 2015, at 4:48 PM, Peter Lambrechtsen <peter@crypt.co.nz>
wrote:
I suspect the answer will be "patches welcome" but...
patches welcome :)
Well that was unexpected. ;) Glad my suspicions were correct. I know what I might be doing over the next week or so.
-Arran
- List info/subscribe/unsubscribe? See
On Jul 15, 2015, at 4:48 PM, Peter Lambrechtsen <peter@crypt.co.nz> wrote:
Has anyone ever thought of having a similar module as dynamic clients where you can pull proxies for external realms from an external source using unlang such as sql or ldap??
Yes. In v3.0, there is preliminary support for dynamic realms. Right now, it's only possible via the trust router code. It's probably not *that* difficult to extend it for additional methods. My $0.02 would be add a "dynamic_realm" module, just like with dynamic clients. Have it look for the Proxy-To-Realm attribute, and if found, look up a filename in a subdirectory on disk. Then, load the realm from that subdirectory.
I have an interesting use case where I am looking to replace an existing radius proxy server with FreeRadius that has a lot of downstream proxies. So far the the best option I have is to copy the proxies.conf across all the instances and HUP the config whenever a new realm is added or removed and wondered if there was a smarter way to do it.
Dynamic realms would help. Alan DeKok.
On 15 Jul 2015, at 21:10, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 15, 2015, at 4:48 PM, Peter Lambrechtsen <peter@crypt.co.nz> wrote:
Has anyone ever thought of having a similar module as dynamic clients where you can pull proxies for external realms from an external source using unlang such as sql or ldap??
Yes. In v3.0, there is preliminary support for dynamic realms. Right now, it's only possible via the trust router code. It's probably not *that* difficult to extend it for additional methods.
My $0.02 would be add a "dynamic_realm" module, just like with dynamic clients. Have it look for the Proxy-To-Realm attribute, and if found, look up a filename in a subdirectory on disk. Then, load the realm from that subdirectory.
Or we can do something that's not shit and incredibly limited, and break with how this feature has been handled so far. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On Jul 16, 2015, at 12:35 AM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
Or we can do something that's not shit and incredibly limited, and break with how this feature has been handled so far.
The point is to take it in stages. The *dynamic* part of realms is mostly there. The next step is to actually make it work. The following step is to get the realms from a database. The last step is a *lot* more work than the first two. I would prefer to get the uncertainties and unknowns out of the way first, before embarking on a complex task. Alan DeKok.
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
Peter Lambrechtsen