proxy request when database is referering to ldap server
Hi All, Im trying to authenticate a user@realm.com The same realm is found in the realm list & the request got proxyed. But the freeradius server is still trying to do ldap_groupcmp(). When 2-3 ldap servers are configured the radius server is busy in connecting to those.. & fails in case of non-reachable condition. Mean while the server says: Reply from home server x.y.z.a:1812 - ID: 0 arrived too late for request 0. Try increasing 'retry_delay' or 'max_request_time' Waking up in 5 seconds... Do anyone have an idea of why is it trying to do ldap_grpcmp() during proxy state?? Please let me know if you have any idea. Thanks Sumi
"sumi thra" <sumi.techno@gmail.com> wrote:
Do anyone have an idea of why is it trying to do ldap_grpcmp() during proxy state??
Because you told it to. The server doesn't do LDAP or proxying to any destination in the default install, so the issue is limited to the changes you made to your server. Alan DeKok.
Hi Alan, Thanks for your reply. What you are saying is correct. But, i want proxy the request for some users and for others i still want to use ldap .. in that case the users file will have the policy for using LDAP & the proxy.conf file will have the realms configured. When the server finds a matching realm, why is it trying to do ldap authentication? ie, why the users policy is getting applied? On 7/17/06, Alan DeKok <aland@nitros9.org> wrote:
"sumi thra" <sumi.techno@gmail.com> wrote:
Do anyone have an idea of why is it trying to do ldap_grpcmp() during proxy state??
Because you told it to.
The server doesn't do LDAP or proxying to any destination in the default install, so the issue is limited to the changes you made to your server.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"sumi thra" <sumi.techno@gmail.com> wrote:
What you are saying is correct. But, i want proxy the request for some users and for others i still want to use ldap .. in that case the users file will have the policy for using LDAP & the proxy.conf file will have the realms configured.
That's pretty trivial to do.
When the server finds a matching realm, why is it trying to do ldap authentication? ie, why the users policy is getting applied?
Because you told it to. Read the debug log. It *will* tell you what's going on. Alan DeKok.
participants (2)
-
Alan DeKok -
sumi thra