Fallback method of authentication
aland at deployingradius.com
Fri May 29 13:32:52 CEST 2015
On May 29, 2015, at 7:07 AM, Rafael Domingues Quitério <rdquiterio.si at cenfim.pt> wrote:
> I have installed FreeRADIUS Version 3.0.7 from source and it's doing machine authentication on a Windows domain.
That makes it more difficult.
> The radius server is a samba member. The place doesn't have a DC, so, the radius authentication is done to a remote DC. If the WAN link to the DC site fails, machine authentication on the Freradius server will fail.
> Because of that , I'm considering having a fallback method for authentication (files) when the link goes down.
> Is that possible to implement via the configuration files? Could somebody give me hints to achieve that.
There is no real way to do fallback authentication. Because EAP / machine authentication is designed to make that impossible.
Put a backup DC in the local site. That's really the best way to solve the problem.
More information about the Freeradius-Users