ldap connection status
Hi, I want to do something like this in *authorize* section if (ldap reachable) files else files_local Is it possible, how do I know if ldap server is reachable or not. I create 2 modules of files ( for ldap and local users , and both has different configs )
Hi, I think you should take a look at this : http://wiki.freeradius.org/config/Fail%20over
On 15.03.2013 12:08, Chitrang Srivastava wrote:
Hi,
I want to do something like this in *authorize* section
ldap { fail = return } if(fail) { files_local } else { files } something like that should work. The ldap module will fail if the servers are unreachable. Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org
Hi, Wiki page of fail-over suggest authorize { preprocess redundant { sql1 sql2 notfound = return } files } I am trying to do similar but radius is giving error group { redundant { ldap_primary fail = return <-----*Entry with no value is invalid * } if(fail){ files_local } else { files } } Why this could be ? On Fri, Mar 15, 2013 at 6:13 PM, Olivier Beytrison <olivier@heliosnet.org>wrote:
On 15.03.2013 12:08, Chitrang Srivastava wrote:
Hi,
I want to do something like this in *authorize* section
ldap { fail = return } if(fail) { files_local } else { files }
something like that should work. The ldap module will fail if the servers are unreachable.
Olivier --
Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 25.03.2013 13:00, Chitrang Srivastava wrote:
I am trying to do similar but radius is giving error group { redundant { ldap_primary fail = return <-----*Entry with no value is invalid* } if(fail){ files_local } else { files } }
Why this could be ?
you have only one ldap instance. you don't need the redundant block authorize { #usual authorize stuff, preprocess, suffix, ect ldap_primary { fail = return } if(fail){ files_local } else { files } } this *should* work. Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org
Even with ldap_secondary I get same error redundant { ldap_primary ldap_secondary fail = 1 } On Mon, Mar 25, 2013 at 5:57 PM, Olivier Beytrison <olivier@heliosnet.org>wrote:
On 25.03.2013 13:00, Chitrang Srivastava wrote:
I am trying to do similar but radius is giving error group { redundant { ldap_primary fail = return <-----*Entry with no value is invalid*
} if(fail){ files_local } else { files } }
Why this could be ?
you have only one ldap instance. you don't need the redundant block
authorize {
#usual authorize stuff, preprocess, suffix, ect
ldap_primary {
fail = return } if(fail){ files_local } else { files } }
this *should* work.
Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>
This is what wiki page says to do authorize { preprocess redundant { sql1 sql2 notfound = return } files } I am trying similar stuff On Mon, Mar 25, 2013 at 7:13 PM, Alan DeKok <aland@deployingradius.com>wrote:
Chitrang Srivastava wrote:
Even with ldap_secondary I get same error redundant { ldap_primary ldap_secondary fail = 1 }
Read doc/configurable_failover, and "man unlang".
This is documented. Yout can't just randomly insert things into the configuration files.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Something like this seems to be working group *{* *fail =1 -> is this OK ?* redundant { ldap_primary ldap_secondary } *}* if(fail){ files_local } else { files } On Mon, Mar 25, 2013 at 7:53 PM, Chitrang Srivastava < chitrang.srivastava@gmail.com> wrote:
This is what wiki page says to do
authorize { preprocess redundant { sql1 sql2 notfound = return } files } I am trying similar stuff
On Mon, Mar 25, 2013 at 7:13 PM, Alan DeKok <aland@deployingradius.com>wrote:
Chitrang Srivastava wrote:
Even with ldap_secondary I get same error redundant { ldap_primary ldap_secondary fail = 1 }
Read doc/configurable_failover, and "man unlang".
This is documented. Yout can't just randomly insert things into the configuration files.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Chitrang Srivastava -
Olivier Beytrison -
Yann Fouillat