FreeRADIUS and EDUROAM timeout issues

Alan DeKok aland at deployingradius.com
Thu Oct 9 14:09:18 CEST 2008


Arran Cudbard-Bell wrote:
> Really in an system of chained proxy servers like EDUROAM you only want
> to be testing first hop connectivity.

  Exactly.

> Alan, do you think it might be a good idea to provide an option to
> disregard failures from standard authentication requests, and instead
> use periodic status_checks to mark servers alive or dead?

  How about having it send Status-Server packets (or whatever you
configure) at the START of the zombie period.  i.e. as soon as it
determines that the server hasn't responded to a request, start pinging
it with Status-Server packets.

  If it responds to the Status-Server, it will be marked "live", even if
it doesn't respond to Access-Request packets.

  That will help, but the only solution to working with broken servers
is to implement the N x M realm/server management.

  Alan DeKok.



More information about the Freeradius-Users mailing list