FreeRADIUS and EDUROAM timeout issues
Alan DeKok
aland at deployingradius.com
Thu Oct 9 14:09:18 CEST 2008
Arran Cudbard-Bell wrote:
> Really in an system of chained proxy servers like EDUROAM you only want
> to be testing first hop connectivity.
Exactly.
> Alan, do you think it might be a good idea to provide an option to
> disregard failures from standard authentication requests, and instead
> use periodic status_checks to mark servers alive or dead?
How about having it send Status-Server packets (or whatever you
configure) at the START of the zombie period. i.e. as soon as it
determines that the server hasn't responded to a request, start pinging
it with Status-Server packets.
If it responds to the Status-Server, it will be marked "live", even if
it doesn't respond to Access-Request packets.
That will help, but the only solution to working with broken servers
is to implement the N x M realm/server management.
Alan DeKok.
More information about the Freeradius-Users
mailing list