EAP-TLS performance SQL backend bottleneck

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Thu Sep 10 21:12:01 CEST 2009

> The documentation says that it was improved only for TTLS and PEAP, but not
> for TLS.
> EAPTLS module always returns "updated" in authorize section and only in the
> end it returns "ok" in authenticate section.
> We need to avoid calling SQL module in authorize section

do you need SQL in authorize section anyway?  if you are using the inner tunnel
virtual server then that should be called if the type is EAP and
therefore you will shortcut any SQL stuff...thats with default configuration
(i dont know what you've done to your server)


More information about the Freeradius-Users mailing list