Re: Freeradius proxy caching users

2011-04-11 Thread Alexander Clouter
Ivan Luska  wrote:
>
> Hello, I use Freeradius as proxy server. Is it possible to cache 
> authenticated users on the proxy and resend access-accept to these 
> users, if home server fails?
> 
If you look through the archives and find out how to failover to a 
virtual server to proxy through instead it is possible.  You would need 
to script up something with rlm_perl/rlm_python to build up a cache, and 
the virtual failover system would then have to query that cache.

Cheers

-- 
Alexander Clouter
.sigmonster says:  I *like* the chicken

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius proxy caching users

2011-04-11 Thread Phil Mayers

On 11/04/11 11:45, Ivan Luska wrote:

Hello, I use Freeradius as proxy server. Is it possible to cache
authenticated users on the proxy and resend access-accept to these
users, if home server fails?


Probably not, but it depends.

If you're using a challenge-response auth method (EAP, for 802.1x 
wireless or wired; CHAP for VPN/dialup/ADSL) then no. It's impossible.


If you're using PAP or similar, then you could probably write a script 
to cache them, or use rlm_caching - see raddb/experimental.conf for the 
"caching" module definition.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Freeradius proxy caching users

2011-04-11 Thread Ivan Luska
Hello, I use Freeradius as proxy server. Is it possible to cache 
authenticated users on the proxy and resend access-accept to these 
users, if home server fails?


Ivan Luska
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html