Is it possible to call sql.authorize on a group of SQL modules? This is needed to reduce number of calls to SQL in EAP-TLS transaction There was a recommendation to cal sql.authorize in post-auth section instead of authorize section, this is fine, but we need the same behavior for SQL groups that handle failover. Do you have any recommendation how to achieve that? post-auth { sql1.authorize } group redundant_sql { sql1 { fail = 1 handled = 3 notfound = return ok = return reject = return } sql2 { fail = 1 handled = 3 notfound = return ok = return reject = return } # if we reach here then all databases are unreachable # do not respond to NAS so that NAS marks RADIUS server # as unavalable and retry another RADIUS server update control { Response-Packet-Type = 'Do-Not-Respond' } handled } -- View this message in context: http://www.nabble.com/sql.authorize-tp25300863p25300863.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
Hi, authorise functions should be called in authorize section...only final things should be called in the post-authorize section..what is the sql stuff doing? alan
How else can I save on number of SQL calls when doing EAPTLS? In my case there are 4 (authorize_check_query,group_membership_query,authorize_group_check_query,authorize_group_reply_query)*11)number of challenge/responses)=44 calls to SQL for every EAPTLS authentication I need to call sql.authorize only in the end when EAPTLS finishes. There are a lot of challenge/response messages and there is no need to call SQL each time for every challenge. I found this thread http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg52560.h... and it was very helpful, however I need to have a redundant group of SQL servers and be able to call sqlgroup.authorize in post-auth section Thanks! Alan Buxey wrote:
Hi,
authorise functions should be called in authorize section...only final things should be called in the post-authorize section..what is the sql stuff doing?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/sql.authorize-tp25300863p25301519.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
participants (2)
-
Alan Buxey -
leopold