hi. can I make a configuration where I have a radius server which authenticates over an external radius (basically a proxy), but caches the successful logins, so that known users won't get asked upstream (at least for a certain time)? I don't want to replicate the backend database. Thanks. -- Lorenzo Milesi - lorenzo.milesi@yetopen.it YetOpen S.r.l. - http://www.yetopen.it/ Via Carlo Torri Tarelli 19 - 23900 Lecco - ITALY - Tel 0341 220 205 - Fax 178 6070 222 GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it -------- D.Lgs. 196/2003 -------- Si avverte che tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario. Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile. Grazie.
On 19/09/11 11:10, Lorenzo Milesi wrote:
hi. can I make a configuration where I have a radius server which authenticates over an external radius (basically a proxy), but caches the successful logins, so that known users won't get asked upstream (at least for a certain time)?
If the authentication protocol is PAP, yes. You would need to use the post-auth section to create some kind of cache entry, and check it on future requests. But it's a bad idea. For any other authentication protocol (CHAP, EAP), no.
I don't want to replicate the backend database.
Just replicate it. It'll be far easier than trying to hack something up.
On Mon, Sep 19, 2011 at 5:10 PM, Lorenzo Milesi <lorenzo.milesi@yetopen.it> wrote:
hi. can I make a configuration where I have a radius server which authenticates over an external radius (basically a proxy), but caches the successful logins, so that known users won't get asked upstream (at least for a certain time)?
I don't want to replicate the backend database.
There's cache module, but it's still marked as experimental: https://github.com/alandekok/freeradius-server/blob/v2.1.x/raddb/experimenta... (look for "cache") You need to recompile from source and use ./configure --with-experimental-modules. -- Fajar
participants (3)
-
Fajar A. Nugraha -
Lorenzo Milesi -
Phil Mayers