Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Tobias Hachmer
Hello list, I'm using a sql database for authorization and ldap for authentication. For fail-over reasons I want to authenticate against user-password information stored in my sql database if my ldap servers are not available (all ldap modules return fail). For authentication I configured:

Re: Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Phil Mayers
On 18/04/12 09:40, Tobias Hachmer wrote: Hello list, I'm using a sql database for authorization and ldap for authentication. For fail-over reasons I want to authenticate against user-password information stored in my sql database if my ldap servers are not available (all ldap modules return

Re: Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Tobias Hachmer
Am 18.04.2012 12:33, schrieb Phil Mayers: On 18/04/12 09:40, Tobias Hachmer wrote: I'm using a sql database for authorization and ldap for authentication. For fail-over reasons I want to authenticate against user-password information stored in my sql database if my ldap servers are not

Re: Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Alan DeKok
Tobias Hachmer wrote: Simply as a fallback, in case there is a maintanance on the network where the ldap servers are conected to. In this case we need to log on to our switches though. Hi, I want my network to keep working when I take my network down. That doesn't really make sense.

Re: Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Phil Mayers
On 18/04/12 13:16, Tobias Hachmer wrote: Ok, I configure the same users, these are about 10-15 users, which are stored in Active Directory, in the sql database. The sql database schould be used for authentication only if the ldap servers are not available. So the SQL server contains an

Re: Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Tobias Hachmer
Am 18.04.2012 14:32, schrieb Alan DeKok: Tobias Hachmer wrote: Simply as a fallback, in case there is a maintanance on the network where the ldap servers are conected to. In this case we need to log on to our switches though. Hi, I want my network to keep working when I take my network

Re: Auth-Type Fall-Through ldap timeouts

2012-04-18 Thread Tobias Hachmer
Am 18.04.2012 14:36, schrieb Phil Mayers: On 18/04/12 13:16, Tobias Hachmer wrote: Ok, I configure the same users, these are about 10-15 users, which are stored in Active Directory, in the sql database. The sql database schould be used for authentication only if the ldap servers are not

Re: LDAP timeouts

2010-01-25 Thread freeradius
At 12:43 AM 1/20/2010, freerad...@corwyn.net wrote: At 08:33 PM 1/14/2010, freerad...@corwyn.net wrote: The Windows environment works, with one quirk, if no one has logged in for a while (~15-30 min), the next user gets: It looks like the only difference (besides MSCHAP strings) between the

Re: LDAP timeouts

2010-01-19 Thread freeradius
At 08:33 PM 1/14/2010, freerad...@corwyn.net wrote: The Windows environment works, with one quirk, if no one has logged in for a while (~15-30 min), the next user gets: Here's the full log of one of those events (redacted): Two interesting points are noted with ***. The reconnect takes only

Re: LDAP timeouts

2010-01-16 Thread Alan DeKok
freerad...@corwyn.net wrote: The Windows environment works, with one quirk, if no one has logged in for a while (~15-30 min), the next user gets: Thu Jan 14 19:31:51 2010 : Error: rlm_ldap: ldap_search() failed: LDAP connection lost. Thu Jan 14 19:31:51 2010 : Info: rlm_ldap: Attempting

LDAP timeouts

2010-01-14 Thread freeradius
I'm currently using freeradius2-2.1.7-2.el5 on CentOS 5.2 for Cisco and L2TP VPN user authentication (via a Sonicwall firewall), using LDAP back to a AD environment, with the Windows built in VPN client. (for very specific details of that environment see my post of Tue, Dec 1, 2009 at 6:31