JRS - Proxying v2

2007-04-06 Thread Arran Cudbard-Bell
Hi Alan, Just to make sure i've got the right idea about v2 realms. Here is an example config for the Janet Roaming Service, which allows users at any academic institution in the UK to authenticate at any other . The version 1 realm JRS realm jrs { type = RADIUS authhost = roamin

Re: JRS - Proxying v2

2007-04-06 Thread Alan DeKok
Arran Cudbard-Bell wrote: > Just to make sure i've got the right idea about v2 realms. > Here is an example config for the Janet Roaming Service, which allows > users at any academic institution in the UK > to authenticate at any other . > > The version 1 realm JRS ... Short, but almost no con

Re: JRS - Proxying v2

2007-04-06 Thread Arran Cudbard-Bell
> Longer, but more configurable. > > As of Thursday's CVS, one of the "type" options for a server_pool is > "type = client_balance", which maps N clients to one home server. It's > not as good as real load balancing, but much less work than tracking > individual EAP sessions. > ... > Very

Re: JRS - Proxying v2

2007-04-06 Thread Alan DeKok
Arran Cudbard-Bell wrote: > Though using todays CVS (head revision for radiusd, checked out about 3 > hours) , I still get Unknown type "client_balance". Hmm.. I'll check the code && get back to you. > Also it doesn't let me put multiple servers in a server pool, and dies > on runtime with >

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Alan DeKok wrote: > Arran Cudbard-Bell wrote: > >> Though using todays CVS (head revision for radiusd, checked out about 3 >> hours) , I still get Unknown type "client_balance". >> > > Hmm.. I'll check the code && get back to you. > > >> Also it doesn't let me put multiple servers in

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: > More weirdness ... > Seems to work fine when I define the host using ipaddr, as opposed to a > hostname. Hmm... I thought I had documented in "proxy.conf" that "hostname" doesn't work yet. Oh well. ... > What would be really cool is if you made a minor change to th

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
OK... two new features. server_pool foo { # hash the source IP, and pick one of the # home servers. type = client-balance ... } Nice, but not rocket science. Even nicer is the templates: # # Holds default configurations for other sections # best used when t

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Alan DeKok wrote: > OK... two new features. > > server_pool foo { > # hash the source IP, and pick one of the > # home servers. > type = client-balance > ... > } > > Nice, but not rocket science. Even nicer is the templates: > > # > # Holds default configurations for o

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: > Very very cool, have these gone into CVS ? If so i'll recompile now and > have a go :) Yes, they're in CVS. Also see raddb/templates.conf for some minimal documentation. > And i'm guessing templates are global too :) ? So they can also be used > in clients and any

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
Alan DeKok wrote: > Yes, they're in CVS. Also see raddb/templates.conf for some minimal > documentation. > Hmm didn't come through in the install :( >> And i'm guessing templates are global too :) ? So they can also be used >> in clients and anywhere else you have to repeat something over an

Re: JRS - Proxying v2

2007-04-07 Thread Alan DeKok
Arran Cudbard-Bell wrote: >> Yes, they're in CVS. Also see raddb/templates.conf for some minimal >> documentation. >> > Hmm didn't come through in the install :( See the distribution directory, not the install directory. I haven't had a chance to update the Makefiles yet. >> Almost any

Re: JRS - Proxying v2

2007-04-07 Thread Arran Cudbard-Bell
>> Hmm didn't come through in the install :( >> > I think the problem is you're still using hostname in home_servers.. > Don't. It doesn't work, and it won't work until I find some time to fix it. > > Aha, yes it works with ipaddr declaration. Hmm looks good, failing over as expected,

Re: JRS - Proxying v2

2007-04-08 Thread Alan DeKok
Arran Cudbard-Bell wrote: > Hmm looks good, failing over as expected, pinging all dead servers to > check if they're alive cool. Much better than before. There are a few other things to add, but they're minor. I think I'll also re-name the "ping" checks to "live" checks, because pings

Re: JRS - Proxying v2

2007-04-08 Thread Peter Nixon
On Sun 08 Apr 2007, Arran Cudbard-Bell wrote: > Alan DeKok wrote: > > Yes, they're in CVS. Also see raddb/templates.conf for some minimal > > documentation. > > Hmm didn't come through in the install :( > > >> And i'm guessing templates are global too :) ? So they can also be used > >> in client