unlang and 1st of 4 ldap source fail

Alexander Clouter alex at digriz.org.uk
Fri Jul 30 14:37:50 CEST 2010


Gary Prosser <gary.prosser at trinity-bris.ac.uk> wrote:
> 
> authorize {
>        preprocess
> chap
> mschap
>        suffix
>       ldap1
>       if(notfound || fail){
>            ldap3
>            if(notfound || fail){
>                ldap2
>                if(notfound || fail){
>                    ldap4
>                }
>            }
>       }
>        files
>        pap
> }
>
Probably better off with failover[1], never got around to sorting it 
out myself, but it is something like this:
----
modules {
	ldap ldap1 {
		[snipped]

		ok = return
	}
	ldap ldap2 {
		[snipped]

		ok = return
	}
	[snipped]
}

authorize {
	preprocess
	suffix

	redundant {
		ldap1
		ldap3
		ldap2
		ldap4
	}

	files
	pap
}
----

No doubt Alan or Arran will correct me.  You could probably also have a 
look at redundant-load-balance[2].

Cheers

[1] http://wiki.freeradius.org/Fail-over
[2] http://wiki.freeradius.org/Load_balancing

-- 
Alexander Clouter
.sigmonster says: Ring around the collar.




More information about the Freeradius-Users mailing list