[EMAIL PROTECTED] wrote:
> If the primary end-server is dead when a NAS send Access-Request, the proxy
> should forward request automatically to the secondary end-server after
> retry_delay and retry_count are came true, and access should be accepted.

  Ideally, yes.

> In my case, when retry_delay and retry_count comes true, proxy instead send
> Access-Reject to the NAS, so and authentication failure to a client. In next
> authentication attempt, proxy forward Access-Request "correctly" to the
> secondary end-server and primary end-server is now marked dead. 

  Yes, that's how it works right now.  The first proxy request is lost.

> Any suggestions to fix failover working smoothly.

  Find the problem, track it down, and send in a patch.

  Look for the code in radiusd.c which marks a realm 'dead' after a
request times out.  Add code to re-set the request to use the new realm.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to