FR 3.0: Fall back to proxy if SQL returns no result

Alan DeKok aland at deployingradius.com
Tue Nov 13 15:31:09 CET 2018


On Nov 13, 2018, at 4:27 AM, Rens Houben via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> I'm (still) working on migrating an existing Radiator setup to FreeRADIUS, and after some deliberation it was felt that the best way to handle the transition would be to have FreeRADIUS use the existing setup as proxies and configure it to fall back to said proxies when rlm_sql returns no hits.

  That's good.

> I've managed to set up the proxies thanks to the example in proxy.conf and the documentation in https://wiki.freeradius.org/config/Proxy, but all the instructions for /using/ the proxy pool involve setting specific realms rather than fallback, and I'm not sure if I'm even using the right search terms.

  You can add a realm that isn't used anywhere else.  e.g. "FALLBACK".  Then, use that for proxying.

  If you're worried about people using it, just check for users logging in as the FALLBACK realm, and reject them.

  Then, do:

	redundant {
		sql
		update control {
			Proxy-To-Realm := "FALLBACK"
		}
	}

> Additionally, looking through the freeradius -X debug log I notice that while it does recognize the home_server stanzas I added to the virtual host, it does /not/ acknowledge the home_server_pool stanza in the same file. Have I missed something?

  The home_server and home_server_pool configuration blocks can appear in any file.  They *can't* be used inside of a "server { ...}" section.

  Alan DeKok.




More information about the Freeradius-Users mailing list