Freeradius proxy caching users
Hello, I use Freeradius as proxy server. Is it possible to cache authenticated users on the proxy and resend access-accept to these users, if home server fails? Ivan Luska
On 11/04/11 11:45, Ivan Luska wrote:
Hello, I use Freeradius as proxy server. Is it possible to cache authenticated users on the proxy and resend access-accept to these users, if home server fails?
Probably not, but it depends. If you're using a challenge-response auth method (EAP, for 802.1x wireless or wired; CHAP for VPN/dialup/ADSL) then no. It's impossible. If you're using PAP or similar, then you could probably write a script to cache them, or use rlm_caching - see raddb/experimental.conf for the "caching" module definition.
Ivan Luska <luska@ics.muni.cz> wrote:
Hello, I use Freeradius as proxy server. Is it possible to cache authenticated users on the proxy and resend access-accept to these users, if home server fails?
If you look through the archives and find out how to failover to a virtual server to proxy through instead it is possible. You would need to script up something with rlm_perl/rlm_python to build up a cache, and the virtual failover system would then have to query that cache. Cheers -- Alexander Clouter .sigmonster says: <Manoj> I *like* the chicken
participants (3)
-
Alexander Clouter -
Ivan Luska -
Phil Mayers