> The situation is that we have a freeradius instance running as a > proxy. > > This instance is configured to proxy requests to a pool of four > freeradius servers. > > Right now three are down, so we are testing the failover conditions. > > IIUC, the desired behavior is that it tries one backend server, and > fails, marks it as a zombie, and then upon receiving another request > from the user logging in, it should try a different backend server. > > What we're seeing is that once no response comes back from a server, > it marks the server as a zombie, but it marks the request as completed.
No, request should fail and server should respond with Access-Reject. > Subsequent authentication requests that come in are looked up in the > response hash, finds that the response has been completed, and ignores > the request. That should go on for a limited period (cleanup_delay). > I could use any help in tracking this down. If it requires a code > change to fix, I'll be contributing that back to the project. So, post the debug and point out what you think should happen. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
