Please document dynamic in proxy server section in proxy.conf

Stefan Winter stefan.winter at restena.lu
Thu Mar 19 07:57:55 CET 2015


Hi,

>   If two realms claim to be served by a server with IP address
>   192.0.2.23, we don't want one of these realms to be able to overwrite
>   the key for the other.  Either both keys will work for the same IP
>   address, or someone is being dishonest, but it's important not to
>   combine home servers in this instance just because they have the same
>   IP and hostname

That is, hostname and port? The same IP can run multiple servers on
different ports with different keys. There's no dishonesty in any of that.

Stefan

> 
> * Being able to have the over-the-wire realm name different  than the
>   internal representation.  (The suffix of the user-name attribute ends
>   up not being the same as the realm name returned)
> 
> * Being able to evaluate periodically with access to connection stats
>   for the home servers whether a realm is still good or whether we want
>   to dynamically  contact it again
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20150319/02da21f9/attachment.sig>


More information about the Freeradius-Devel mailing list