Re: JRS - Proxying v2

2007-04-08 Thread Alan DeKok
Arran Cudbard-Bell wrote: Hmm looks good, failing over as expected, pinging all dead servers to check if they're alive cool. g Much better than before. There are a few other things to add, but they're minor. I think I'll also re-name the ping checks to live checks, because pings

Re: JRS - Proxying v2

2007-04-08 Thread Peter Nixon
On Sun 08 Apr 2007, Arran Cudbard-Bell wrote: Alan DeKok wrote: Yes, they're in CVS. Also see raddb/templates.conf for some minimal documentation. Hmm didn't come through in the install :( And i'm guessing templates are global too :) ? So they can also be used in clients and

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: Though using todays CVS (head revision for radiusd, checked out about 3 hours) , I still get Unknown type client_balance. Hmm.. I'll check the code get back to you. Also it doesn't let me put multiple servers in a server pool, and dies on runtime with

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Alan DeKok wrote: Arran Cudbard-Bell wrote: Though using todays CVS (head revision for radiusd, checked out about 3 hours) , I still get Unknown type client_balance. Hmm.. I'll check the code get back to you. Also it doesn't let me put multiple servers in a server pool,

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: More weirdness ... Seems to work fine when I define the host using ipaddr, as opposed to a hostname. Hmm... I thought I had documented in proxy.conf that hostname doesn't work yet. Oh well. ... What would be really cool is if you made a minor change to the

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
OK... two new features. server_pool foo { # hash the source IP, and pick one of the # home servers. type = client-balance ... } Nice, but not rocket science. Even nicer is the templates: # # Holds default configurations for other sections # best used when

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Alan DeKok wrote: OK... two new features. server_pool foo { # hash the source IP, and pick one of the # home servers. type = client-balance ... } Nice, but not rocket science. Even nicer is the templates: # # Holds default configurations for other

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: Very very cool, have these gone into CVS ? If so i'll recompile now and have a go :) Yes, they're in CVS. Also see raddb/templates.conf for some minimal documentation. And i'm guessing templates are global too :) ? So they can also be used in clients and

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Alan DeKok wrote: Yes, they're in CVS. Also see raddb/templates.conf for some minimal documentation. Hmm didn't come through in the install :( And i'm guessing templates are global too :) ? So they can also be used in clients and anywhere else you have to repeat something over and over

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: Yes, they're in CVS. Also see raddb/templates.conf for some minimal documentation. Hmm didn't come through in the install :( See the distribution directory, not the install directory. I haven't had a chance to update the Makefiles yet. Almost anywhere.

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Hmm didn't come through in the install :( I think the problem is you're still using hostname in home_servers.. Don't. It doesn't work, and it won't work until I find some time to fix it. Aha, yes it works with ipaddr declaration. Hmm looks good, failing over as expected, pinging

JRS - Proxying v2

2007-04-06 Thread Arran Cudbard-Bell
Hi Alan, Just to make sure i've got the right idea about v2 realms. Here is an example config for the Janet Roaming Service, which allows users at any academic institution in the UK to authenticate at any other . The version 1 realm JRS realm jrs { type = RADIUS authhost =

Re: JRS - Proxying v2

2007-04-06 Thread Arran Cudbard-Bell
Longer, but more configurable. As of Thursday's CVS, one of the type options for a server_pool is type = client_balance, which maps N clients to one home server. It's not as good as real load balancing, but much less work than tracking individual EAP sessions. ... Very nice