High Avaibility

2012-03-01 Thread Anto
Hello In the coming days I will set up a freeradius server for access control and accounting. I've been looking for information on freeradius and high availability, since my idea is to have two servers in case one fails, continue to operate with the other, but I just found information. So I turn

Re: High Avaibility

2012-03-01 Thread Phil Mayers
On 01/03/12 10:16, Anto wrote: Hello In the coming days I will set up a freeradius server for access control and accounting. I've been looking for information on freeradius and high availability, since my idea is to have two servers in case one fails, continue to operate with the other, but I

Re[2]: High Avaibility

2012-03-01 Thread Толик Шавловский
Hi, if your NAS does not support 2 radius servers you can use load balancer (ex fortinet). 01 марта 2012, 15:37 от Phil Mayers p.may...@imperial.ac.uk: On 01/03/12 10:16, Anto wrote: Hello In the coming days I will set up a freeradius server for access control and accounting. I've

Duplicating radius accounting requests

2012-03-01 Thread Sunderjeet Singh
Hi, I have a requirement to duplicate the radius accounting request messages to multiple destinations. Although the requests are duplicated, there should be a single response sent to the original source of radius acc request. Is this possible with free radius server (acting as proxy) ? thanks

Re: Duplicating radius accounting requests

2012-03-01 Thread Fajar A. Nugraha
On Thu, Mar 1, 2012 at 9:24 PM, Sunderjeet Singh sunde...@gmail.com wrote: Hi, I have a requirement to duplicate the radius accounting request messages to multiple destinations. Although the requests are duplicated, there should be a single response sent to the original source of radius acc

Re: LDAP (POSIX attibutes) password expiry

2012-03-01 Thread up
u...@3.am wrote: checkItem Expiration radiusExpiration Did you check that the LDAP module is returning this attribute for the query? No, I don't expect it to, since I don't have that attribute or anything that looks like it might be a good substitute. So...

Re: Duplicating radius accounting requests

2012-03-01 Thread sunderjs
Will it involve any disk operation? (Sorry I'm new to freeradius and evaluating radius proxies for my requirement) Rate I need would be about 1000+ radius messages per second. Sunderjeet Sent from BlackBerry® on Airtel -Original Message- From: Fajar A. Nugraha l...@fajar.net Sender:

Re: LDAP (POSIX attibutes) password expiry

2012-03-01 Thread up
On 28/02/12 21:16, u...@3.am wrote: Hi: We've been running various versions of FreeRadius for years, currently 2.1.10 in this application. A while ago, we switched from PAM (unix) auth to LDAP auth. Everything worked fine after the switch...POSIX attributes for group membership

Re: Duplicating radius accounting requests

2012-03-01 Thread Fajar A. Nugraha
On Thu, Mar 1, 2012 at 9:42 PM, sunde...@gmail.com wrote: Will it involve any disk operation? (Sorry I'm new to freeradius and evaluating radius proxies for my requirement) Yes, but it shouldn't matter much. The writes and reads are AFAIK sequential. Rate I need would be about 1000+ radius

Zombie Clarification

2012-03-01 Thread Norman Elton
Just to make sure I know what's going on... According to the docs, a server that does not respond to a request within the response_window (default: 20 sec) is considered a zombie, and becomes eligible for the status checker. If no responses are received within the zombie_period (default: 40 sec),

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-01 Thread Matthew Newton
On Thu, Mar 01, 2012 at 10:25:13AM -0800, whopeman wrote: connects it requests PEAP as the preferred auth type but FR seems to be pushing v0 as the request type and does not seem to be allowing for v1. My I was slightly wrong - the rlm_eap2 module does support it, but it's experimental and not

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-01 Thread Matthew Newton
Hi, On Thu, Mar 01, 2012 at 10:25:13AM -0800, whopeman wrote: I have run wireshark and grabbed the packet traces as well, when my client connects it requests PEAP as the preferred auth type but FR seems to be pushing v0 as the request type and does not seem to be allowing for v1. My client