radius authentication fallback from ldap to local

Fajar A. Nugraha list at fajar.net
Sat May 7 15:13:41 CEST 2011


On Sat, May 7, 2011 at 7:17 PM, Chowdhury Satish-NVF476
<satish.chowdhury at motorolasolutions.com> wrote:
> Hi,
>
> Got it resolved with following configuration

Glad to hear it, thanks for sharing the solution.

>
> radiusd.conf
> ------------
> authorize {


>         ldap {
>                  fail = 1
>         }
>         if(fail)
>         {
>               files
>         }
> }


I think you should also be able to use

redundant {
    ldap
    files
}

which is simpler, and more consistent with the style you used on
authenticate section.

>
> authenticate {
>  .....
>  Auth-Type FALLBACK_LDAP{
>                redundant {
>                        ldap
>                        pap
>                }
>  ......
> }

-- 
Fajar




More information about the Freeradius-Users mailing list