About proxy mode, when all home servers are dead
Alan DeKok
aland at deployingradius.com
Thu Mar 6 09:54:11 CET 2014
regulus regulus wrote:
> Not sure if I understood it the wrong way, I have set a Post-Proxy-Type
> Fail handler in a virtual server, and then include the virtual_server in
> home_server_pool, but I still get a Access-Reject after both home
> servers are dead.
It should work. Read the debug output to see what's going on.
> I read the comments in proxy.conf again, it says "A virtual_server may
> be specified here. If so, the "pre-proxy" and "post-proxy" sections are
> called when the request is proxied, and when a response is received."
> Does it mean when there is no response from home server, it still
> cannot go into the Post-Proxy-Type Fail hander.. ?
No. It means that the pre-proxy section should be called before
proxying, and the post-proxy section should be called after proxying,
including any proxy failure.
> And then I created another virtual server with authorize using
> do_not_respond policy, and set it to fallback in home_server_pool. And
> it seems to start working (no access reject returned). Do you think it
> is the correct way to do it,
If it works...
> do I need to include the Post-Proxy-Type
> Fail handler as well?
Apparently not.
Alan DeKok.
More information about the Freeradius-Users
mailing list