Hi, > Making those changes helped alot and reduced the LDAP calls to 3 - Thanks!! I > would like to drop this further, as it seems that 2 of them are from the > authorize section. I can't seem to remove it from the authorize section, > though, as doing so pisses off mschap (can't find NT-password) and removing > mschap pisses off FR (no auth-type defined). Also, I use a LDAP huntgroup, > where users in an LDAP group are allowed to attached to a special SSID, which > i think is part of the authorization process....
in this case you need to use LDAP in the authorise section - no two ways about it. however, thiat then becomes a backend issue - so you need to find out why it takes so long to do a query at that point alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html