FR 3.0 radsec : dynamic home server discovery status

[Alejandro Perez-Mendez]

El 4/3/20 a las 16:16, Alan DeKok escribió:
> On Mar 4, 2020, at 9:53 AM, Alejandro Perez-Mendez <alex.perez-mendez at JISC.AC.UK> wrote:
>> In v3 we've got the rlm_realm module, which we use for the Trust Router protocol, which is somewhat a dynamic discovery mechanism. Would it be very difficult to add another discovery mechanism there?
>    The issue is DNS lookups.  We would need to do them via some async method, otherwise the server just shuts down.

That's right, but for the TR we make this sync anyway, and it works good 
enough, since the blocking method only happens once per realm during the 
first attempt.

Just mentioning that for providing a just-works solution it might be an 
approach to take into account.
>    The internals of v4 are 100% async, so this is almost trivial to do there.  In v3, it's just a lot more complex.

Agreed. But for v3 it could be synchronous.

Best

>
>    Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
Alejandro Perez-Mendez
Technical Specialist (AAA), Trust & Identity
Skype alejandro_perez_mendez
jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.  

For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice