Hi, I've used freeradius-1.1.3-1.6.el5 with openldap backend on my old system. When OpenLDAP server was down, client requested the Freeradius doesn't get any response and then requested another radius server. Now, after upgade to freeradius-2.1.9-3.el6, the behavior has changed. When backend LDAP server is down, FreeRadius responds immediately with Reject. I've read documentation and found this: Module return codes: RLM_MODULE_FAIL: Processing of this request could not be completed. Something is not working properly. FreeRADIUS responds with a reject response. It seems like it is correct behavior, but is it possible to change it as before? When backend OpenLDAP is down, freeradius should not respond to client? Regards, rus
authorize { ... ldap { # I don't understand next line: fail = 1 } if (fail) { do_not_respond } ... }
Hi, just for someone who will search answer later: finally I found the explanation in http://wiki.freeradius.org/Fail-over : 'The "fail = 1" entry tells the server to remember the "fail" code, with priority "1". The normal configuration is "fail = return", which means "if the detail module fails, stop processing the authorize section".' rus
participants (2)
-
Alan DeKok -
rss ln