Well, I read the documentation, but I don't succeed to fix my problem, and I
don't know if the solution is in this documentation:
I use the attribute redundant and we can read:
"
* redundant{...} and append{...} are just shortcuts. You could write
group {
sql1 {
fail = 1
notfound = 2
noop = return
ok = return
updated = return
reject = return
userlock = return
invalid = return
handled = return
}
sql2 {
fail = 1
notfound = 2
noop = return
ok = return
updated = return
reject = return
userlock = return
invalid = return
handled = return
}
}
instead of
redundant {
sql1
sql2
}
but the latter is just a whole lot easier to read."
When I use redundant, I understand it's equivalent to have groups which are
failable. My problem is I have failover between two ldaps, and if the first
ldap is used, it works because I have:
Sending Access-Accept of id 93 to 192.168.0.50 port 1812
Reply-Message = "Utilisateur: fmehault, group: Administrateur"
Cisco-AVPair = "shell:priv-lvl=15"
Service-Type = NAS-Prompt-User
Finished request 0.
And if the first failed, the second ldap is used, so we can say that it's
works, but it fails because I have:
Sending Access-Accept of id 94 to 192.168.0.50 port 1812 Finished request 0.
It fails because the Access-Accept was built without Cisco-AVPair =
"shell:priv-lvl=15" and Service-Type = NAS-Prompt-User. And I don't know why, I
don't understand,
Thanks Alan for your help, I will continue to read the failover documentation,
maybe there is something that I missed, If someone has another lead ..
Regards,
François
-----Message d'origine-----
De : freeradius-users-bounces+francois.mehault=netplus...@lists.freeradius.org
[mailto:freeradius-users-bounces+francois.mehault=netplus...@lists.freeradius.org]
De la part de a.l.m.bu...@lboro.ac.uk
Envoyé : vendredi 29 mai 2009 18:04
À : FreeRadius users mailing list
Objet : Re: 1 freeradius with 2 openldap (multi master)
Hi,
> And now, if I start radiusd and slapd on server A and not on server B, it
> works. And if I stop slapd on server A, and start slapd on server B, it
> doesn't work. It's maybe a lead...
this is documented
http://wiki.freeradius.org/Fail-over
you need the group to be failable etc
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
