--On 04 March 2011 12:34 -0500 John Douglass <john.dougl...@oit.gatech.edu> wrote:

Group,

Recently, my AD servers were patched by another support group and this
caused a (small but noticeable) service outage for our WPA radius
services (Radius 2.1.9)

I can think of two things to investigate:
* Recent Samba can do winbind credential caching IIRC - I haven't experimented with this so I'm not sure if it will work for this application.

* Enable Fast Session Resumption:
<https://github.com/alandekok/freeradius-server/blob/master/raddb/modules/eap#L312>

... We dropped the hits on our DCs by > 40% by doing this. N.B Resumed sessions will not touch your inner-tunnel config, so you have to make sure that you pay attention when (re-)assigning VLANs / other returned attributes based on username.

-James

--
James J J Hooper
Network Specialist, University of Bristol
http://www.wireless.bristol.ac.uk               
--


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to