Le vendredi 23 juillet 2010 à 20:09 +0200, Jevos, Peter a écrit :

Hi alex, thank you for your mail, helped a lot : )

Now it's working, no idea why and how but working : )

Here is my config: Users:

DEFAULT Auth-Type := vpn_auth_name,Huntgroup-Name == "vpn" Fall-Through = Yes

Setting Auth-Type is discouraged. further more setting Auth-Type to a module name sounds like an error to me (but maybe am i mistaking) I think you can remove Auth-Type

Radiusd.conf: instantiate {

redundant vpn_auth_name { group { ntlm_auth_vpn1 { reject = 1 ok = return } ntlm_auth_vpn2 { reject = 1 ok = return } }

Why are you using group inside redundant... I'm not sure this is usefull. Using ntlm_auth_vpn1 and ntlm_auth_vpn2 should be enough. Look here for more infos and example of how redundant modules are set: http://wiki.freeradius.org/Fail-over

And the sites-available/default: Authenticate { vpn_auth_name }

Thanks , have a nice day p

-----Original Message----- From: freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradius.org [mailto:freeradius-users-bounces+peter.jevos=oriflame.com@lists.freeradi us.org] On Behalf Of alexandre.chapellon@mana.pf Sent: Friday, July 23, 2010 7:44 PM To: FreeRadius users mailing list Subject: Re: How to set properly failover ?

This how I do, but it's not the only way and may not feet your needs:

In radiusd.conf, instantiate a redundant module: instantiate { ... redundant ha_auth_name { ntlm_auth_vpn1 ntlm_auth_vpn2 } ... }

In default sites config, section authorize

authorize { ... ha_auth_name ... }

Quite simple and works great here for some other moduls (SQL) Hope it helps.

...

Date: Fri, 23 Jul 2010 18:45:30 +0200 From: freeradius-users-bounces+alexandre.chapellon=mana.pf@lists.freeradius.or g (on behalf of "Jevos, Peter" <Peter.Jevos@oriflame.com>) Subject: How to set properly failover ? To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>

Hi guys

I'm really trying but it's not easy to find somehitng in the documenatiion.

I have 2 modules ntlm_auth_vpn1/2 and I like to do failover.

I tried this but I was not sucesfull:

In the modules I have 2 files, ntlm_auth_vpn1 and ntlm_auth_vpn2

In the sites-available/default I have:

# Allow EAP authentication.

eap

ntlm_auth

ntlm_auth_vpn {

group {

ntlm_auth_vpn1 {

reject = 1

ok = return

}

ntlm_auth_vpn2 {

reject = 1

ok = return

}

}

}

In my users file is:

DEFAULT Auth-Type := ntlm_auth_vpn,

Fall-Through = Yes

What should be the correct syntax ?

Freeradius is great tool , however every step forward is like a childbirth : )

What I'm really missing is what should be placed where.

I'd really enjoy the new book . I hope it will be released soon : )

Thanks

Pet ________________ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

---- Message original---- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html