Thanks Alan
I've got the desired result (if ldap1 result is fail or notfound
continue; if ok then stop) using the stanza below
authorize {
preprocess
chap
mschap
suffix
redundant {
ldap1 {
fail = 1
noop = 2
notfound = 3
ok = return
reject = return
userlock = return
invalid = return
}
ldap3 {
fail = 1
noop = 2
notfound = 3
ok = return
reject = return
userlock = return
invalid = return
}
ldap2 {
fail = 1
noop = 2
notfound = 3
ok = return
reject = return
userlock = return
invalid = return
}
ldap4 {
fail = 1
noop = 2
notfound = 3
ok = return
reject = return
userlock = return
invalid = return
}
}
}
Gary
-
IT Manager
Trinity College, Bristol (http://www.trinity-bris.ac.uk)
-----Original Message-----
From: Alan DeKok <[email protected]>
Reply-To: FreeRadius users mailing list
<[email protected]>
To: FreeRadius users mailing list
<[email protected]>
Subject: Re: unlang and 1st of 4 ldap source fail
Date: Fri, 30 Jul 2010 15:39:09 +0200
Alexander Clouter wrote:
> Probably better off with failover[1], never got around to sorting it
> out myself, but it is something like this:
> ----
> modules {
> ldap ldap1 {
> [snipped]
>
> ok = return
No. The "ok = return" thing NEVER goes into a "modules" configuration.
> authorize {
> preprocess
> suffix
>
> redundant {
> ldap1
> ldap3
> ldap2
> ldap4
> }
That's the right one.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
To ensure you receive email from Trinity College into your inbox, please add
@trinity-bris.ac.uk to your email safe list (also known as whitelist).
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
