Oops, forgot one important keyword in there.  You need to put the
Synchronous flag in the AuthBy RADIUS clause for host1.  If you don't
then Radiator will move onto the next AuthBy without waiting for a reply.

     <AuthBy RADIUS>
         <Host host1.herts.ac.uk>
             Secret xxxx
         </Host>
         Synchronous
     </AuthBy>


Check the info in the Radiator manual about the implications of using
Synchronous though.

Cheers,

Martin.

On 23/11/2011 01:10, Martin Burton wrote:
> You could probably achieve what you need using an AuthByPolicy, like:
> 
> <Handler Realm= domain.ac.uk>
>     RewriteUsername s/^([^@]+).*/$1/
>     AuthByPolicy ContinueWhileReject
>     <AuthBy RADIUS>
>         <Host host1.herts.ac.uk>
>             Secret xxxx
>         </Host>
>     </AuthBy>
>     <AuthBy RADIUS>
>         <Host host2.herts.ac.uk>
>             Secret xxxxx
>         </Host>
>     </AuthBy>
>     # Log accounting to the detail file in LogDir
>     AcctLogFileName %L/detail
> </Handler>
> 
> HTH.
> 
> 
> On 23/11/2011 00:01, Judy Angel wrote:
>>
>> Radius V4.2.
>> I am looking to authenticate on two servers. If the userid is not available 
>> in host1 try host2. The config below works fine on host1 but if the return 
>> fails as the userid does not exist it does not check for the userid in 
>> host2. Should this be possible?
>>
>>
>> <Handler Realm= domain.ac.uk>
>>         RewriteUsername s/^([^@]+).*/$1/
>>         <AuthBy RADIUS>
>>
>>                 <Host host1.herts.ac.uk>
>>                 Secret xxxx
>>                 </Host>
>>                 <Host host2.herts.ac.uk>
>>                 Secret xxxxx
>>                 </Host>
>>         </AuthBy>
>>       # Log accounting to the detail file in LogDir
>>     AcctLogFileName %L/detail
>> </Handler>
>>
>> Thanks
>> Judy Angel
>> University of Hertfordshire
>>
>> _______________________________________________
>> radiator mailing list
>> [email protected]
>> http://www.open.com.au/mailman/listinfo/radiator
> 
> 
> 
> _______________________________________________
> radiator mailing list
> [email protected]
> http://www.open.com.au/mailman/listinfo/radiator

-- 
Martin Burton
Senior Systems Administrator               \\\|||///
Special Projects Team                     \\  ^ ^  //
Wellcome Trust Sanger Institute            (  6 6  )
-----------------------------------------oOOo-(_)-oOOo---
                                  http://www.sanger.ac.uk

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
radiator mailing list
[email protected]
http://www.open.com.au/mailman/listinfo/radiator

Reply via email to