error in configurable failover?
I am trying to get configurable failover working.(ok, this example is not yet that far) With authenticate { #ldap1 group { ldap1 { notfound = return } } } in radiusd.conf I get: rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 0x8117ff8 Module: Instantiated ldap (ldap1) radiusd.conf[1862] Unknown Auth-Type "_UnNamedGroup" in authenticate section. Errors setting up modules changing this to authenticate { ldap1 #group { #ldap1 { #notfound = return #} #} # } freeradius starts without problems. radiusd -v radiusd: FreeRADIUS Version 1.1.0-pre0, for host i686-pc-linux-gnu, built on Nov 22 2005 at 22:02:26 Norbert Wegener
I forgot to mention, that the complete radiusd.conf can be found at http://www.wegener-net.de/fr/radiusd.conf Norbert Wegener Norbert Wegener wrote:
I am trying to get configurable failover working.(ok, this example is not yet that far) With authenticate { #ldap1 group { ldap1 { notfound = return } }
} in radiusd.conf I get:
rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 0x8117ff8 Module: Instantiated ldap (ldap1) radiusd.conf[1862] Unknown Auth-Type "_UnNamedGroup" in authenticate section. Errors setting up modules
changing this to authenticate { ldap1 #group { #ldap1 { #notfound = return #} #} #
}
freeradius starts without problems. radiusd -v radiusd: FreeRADIUS Version 1.1.0-pre0, for host i686-pc-linux-gnu, built on Nov 22 2005 at 22:02:26
Norbert Wegener
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Norbert Wegener <nw@sbs.de> wrote:
authenticate { #ldap1 group { ldap1 {
You can't use anonymous groups in the "authenticate" section. You have to explicitely use "Auth-Type", and give it a name. This is because only ONE auth-type is run from that section. So if you had an anonymous group, it would never get run, because you could never reference it by name. Alan DeKok.
Norbert Wegener <nw@sbs.de> wrote:
authenticate { #ldap1 group { ldap1 {
You can't use anonymous groups in the "authenticate" section. You have to explicitely use "Auth-Type", and give it a name. This is because only ONE auth-type is run from that section. So if you had an anonymous group, it would never get run, because you could never reference it by name.
Alan DeKok.
Say you had two ldap instances. authorize { redundant { ldap1 ldap2 } } authenticate { ldap1 ldap2 } Say you had 4 ldap instances. Two for dial users and two for isdn users. They point to the same servers, but with different configurations. authorize { Autz-Type dial { redundant { ldap_dial1 ldap_dial2 } } Autz-Type isdn { redundant { ldap_isdn1 ldap_isdn2 } } } authenticate { Auth-Type dial { ldap_dial1 ldap_dial2 } Auth-Type adsl { ldap_isdn1 ldap_isdn2 } } In that case, you would need to declare these somewhere, such as the users file. DEFAULT NAS-Port-Type == Async, Autz-Type := dial, Auth-Type := dial DEFAULT NAS-Port-Type == ISDN, Autz-Type := isdn, Auth-Type := isdn
participants (3)
-
Alan DeKok -
Dusty Doris -
Norbert Wegener