Freeradius and LDAP keepalive

Angel L. Mateo amateo at um.es
Wed Sep 7 12:14:51 CEST 2011


Hello,

	I have a freeradius 2.1.10 running in a ubuntu (10.04) server. My users 
are in a ldap directory.

	The problem I have is that openldap server has an idle timeout (if 
there is more than this time with an idle connection, openldap closes 
the connection). So I want to know if there is some way to configure a 
keepalive on the ldap connection of freeradius.

	I have found in 
http://freeradius.1045715.n5.nabble.com/rlm-ldap-amp-TCP-KeepAlive-td2795077.html 
that it seems to be code to do this. I have checked this code with code 
from version 2.1.10 and it is there, but I think I have to configure 
something because connections are closed and I have logs like:

Sep  7 12:12:51 vulpes22 freeradius[21497]: RADIUS Requested access: 
<myuser at mydomain> (0)
Sep  7 12:12:51 vulpes22 freeradius[21497]:   [ldap-email] ldap_search() 
failed: LDAP connection lost.
Sep  7 12:12:51 vulpes22 freeradius[21497]:   [ldap-email] Attempting 
reconnect
Sep  7 12:12:51 vulpes22 freeradius[21497]: Login OK: 
[<myuser at mydomain>] (from client XXXXXXX port 10000)

	freeradius is working (it reconnects with the ldap without any 
problem), but I want to avoid this error.

	Is there any way to configure this keepalive?

-- 
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información       _o)
y las Comunicaciones Aplicadas (ATICA)      / \\
http://www.um.es/atica                    _(___V
Tfo: 868887590
Fax: 868888337



More information about the Freeradius-Users mailing list