About proxy mode, when all home servers are dead

Alan DeKok aland at deployingradius.com
Thu Mar 6 09:54:11 CET 2014

regulus regulus wrote:
> Not sure if I understood it the wrong way, I have set a Post-Proxy-Type
> Fail handler in a virtual server, and then include the virtual_server in
> home_server_pool, but I still get a Access-Reject after both home
> servers are dead.   

  It should work.  Read the debug output to see what's going on.

> I read the comments in proxy.conf again, it says "A virtual_server may
> be specified here.  If so, the "pre-proxy" and "post-proxy" sections are
> called when the request is proxied, and when a response is received."
>  Does it mean when there is no response from home server, it still
> cannot go into the Post-Proxy-Type Fail hander.. ?

  No.  It means that the pre-proxy section should be called before
proxying, and the post-proxy section should be called after proxying,
including any proxy failure.

> And then I created another virtual server with authorize using
> do_not_respond policy, and set it to fallback in home_server_pool.  And
> it seems to start working (no access reject returned).  Do you think it
> is the correct way to do it,

  If it works...

> do I need to include the Post-Proxy-Type
> Fail handler as well?

  Apparently not.

  Alan DeKok.

More information about the Freeradius-Users mailing list