> Alan DeKok wrote:
> Scott McLane Gardner wrote:
> > So, now I'm confused again. If this doesn¹t load balance, then how should
> > I really be going about this?
>
> It's hard.
Actually, on some further reading, it might not be: the LDAP library/DNS may
take care of this instead of requiring s
On 27/03/12 23:38, Brian De Wolf wrote:
On Mon, 26 Mar 2012 11:46:22 -0700
Scott McLane Gardner wrote:
If I can't use if statements in a load balance block, can anyone
suggest another way to go about accomplishing what I want to do here?
After reading this thread and realizing it affects my
On Mon, 26 Mar 2012 11:46:22 -0700
Scott McLane Gardner wrote:
> If I can't use if statements in a load balance block, can anyone
> suggest another way to go about accomplishing what I want to do here?
After reading this thread and realizing it affects my implementation
(though with mysql), I st
Hi,
> So, is the documentation at
> http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
> else%22 incorrect, or is it only correct for the very latest version?
its correct you want to load balance the requests to the LDAP servers, yes?
so whats the load balancing of t
Scott McLane Gardner wrote:
> So, is the documentation at
> http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
> else%22 incorrect, or is it only correct for the very latest version?
It's correct. You're missing the point.
That documentation is for calling MODULES.
Hi,
> Does this mean that what I want to do is not possible?
my advice was so you werent doing all that LDAP-Group , NAS-IP-Address
stuff in unlang...
regarding the load-balance, you should be okay just keeping
that bit similar to how you had it ...heck, you might even try
redundant-load-balanc
So, is the documentation at
http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
else%22 incorrect, or is it only correct for the very latest version?
-Scott
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Scott McLane Gardner wrote:
> So, now I'm confused again. If this doesn¹t load balance, then how should
> I really be going about this?
It's hard.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Scott McLane Gardner
> >(A sensible wishlist item might be to have load-balance
> sections in the
> >instantiate section register the same hooks as their
> submodules, then
> >you'd be able to name the load-balance and use
> >-Ldap-Group. But that sounds mildly hairy to
> >implement.)
> >
>
>I cannot answer your question about if statements, but this
>much is clear: the Ldap-Group check attribute will query
>the ldap module that was instantiated last. If you want
>to query a specific module, you have to use -Ldap-Group.
>
>Similarly for ldap xlats, you have to use the module name.
On 27/03/12 15:07, Scott McLane Gardner wrote:
I'd be surprised if using Ldap-Group in the user's file
resulted in load balancing of the group membership
queries to the LDAP servers. Does it?
It does, actually. Or at least it appears to. The first time it used ldap2
and the second time it use
Scott McLane Gardner
> >I'd be surprised if using Ldap-Group in the user's file resulted in
> >load balancing of the group membership queries to the LDAP servers.
> >Does it?
> >
> It does, actually. Or at least it appears to. The first time
> it used ldap2 and the second time it used ldap1.
>
>Brian Julin wrote:
>> I'd be surprised if using Ldap-Group in the user's file
>> resulted in load balancing of the group membership
>> queries to the LDAP servers. Does it?
>
> It doesn't.
>
> Alan DeKok.
So, now I'm confused again. If this doesn¹t load balance, then how should
I really be g
>
>I'd be surprised if using Ldap-Group in the user's file
>resulted in load balancing of the group membership
>queries to the LDAP servers. Does it?
>
It does, actually. Or at least it appears to. The first time it used ldap2
and the second time it used ldap1.
-
List info/subscribe/unsubscribe?
Brian Julin wrote:
> I'd be surprised if using Ldap-Group in the user's file
> resulted in load balancing of the group membership
> queries to the LDAP servers. Does it?
It doesn't.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Scott McLane Gardner wrote:
> Sent: Tuesday, March 27, 2012 9:34 AM
> To: FreeRadius users mailing list
> Subject: Re: load balancing and if statements
>
> This is the answer. Also, this is much easier than what I was
> trying to do. Thank you for the pointer, Alan.
&
This is the answer. Also, this is much easier than what I was trying to
do. Thank you for the pointer, Alan.
-Scott
On 3/26/12 5:17 PM, "Alan Buxey" wrote:
>hi,
>
>a quick glance at your question and i'd say you be better off using
>simple entries in the users file - simple check items (use hu
hi,
a quick glance at your question and i'd say you be better off using
simple entries in the users file - simple check items (use huntgroups
for your NAS addresses) with LDAP groups.
match the good stuff, set reply
match the bad stuff, set reject.
alan
-
List info/subscribe/unsubscribe? See h
Scott McLane Gardner Wrote:
> Here is the configuration I am attempting:
>
> >load-balance {
> >ldap1
> >
> >if (Ldap-Group == "NET Staff") {
I cannot answer your question about if statements, but this
much is clear: the Ldap-Group check attribute will query
the ldap modu
19 matches
Mail list logo
