no arguing here, just clearing up things... :-) stay cool this works as expected, though it is not that obvious that Auth-Type name refers to module name, and not just names the method... Or I might have missed that from the documentation. Anyway, "fail-over" section does not reflect this IMO. Not a note of "authenticate" sub-section at all... should it be updated? http://wiki.freeradius.org/Fail-over
authorize { ... redundant { ds-02 ds-01 } } authenticate { ... Auth-Type ds-01 { ds-01 } Auth-Type ds-02 { ds-02 } } on 2/1/2007 4:04 PM Alan DeKok wrote: > Alexei Monastyrnyi wrote: > >> But I do define it when switching from singe server to redundant group, >> don't I? >> > > Yes. > > >> Isn't that enough? >> > > What did my previous response say? > > You can argue with me, or you can try what I suggested, and verify for > yourself that it works. > > As a hint: when the LDAP module sets Auth-Type, it sets the value to > the name of the module... which in your case is "ds-01", not "LDAP". > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html