(RADIATOR) ldap <AuthBy ROUNDROBIN>,

Peter Havekes p.havekes at avans.nl
Wed May 14 05:52:11 CDT 2008


Wouldn't that be a nice feature for a future release? 
 AuthByPolicy roundrobin - witch uses a random one of the <authby > clauses in the <authby group> and only tries another one if there was no response.



-----Oorspronkelijk bericht -----
Van: "Hugh Irvine" <hugh at open.com.au>
Aan: "Peter Havekes" <p.havekes at avans.nl>
CC: radiator at open.com.au
Verzonden: 14-5-08 00:45
Onderwerp: Re: (RADIATOR) ldap <AuthBy ROUNDROBIN>,


Hello Peter -

Thanks for your mail.

What you describe is not possible in a single instance of Radiator,  
however it is very simple to do with multiple instances of Radiator.

You would have a "front-end" instance of Radiator with an AuthBy  
ROUNDROBIN clause proxying to three "back-end" instances of Radiator  
each with a single AuthBy LDAP2 clause.

This approach has the added advantage of providing some parallel  
processing of simultaneous requests.

I often use this sort of design in my consulting practice.

hope that helps

regards

Hugh


On 13 May 2008, at 22:38, Peter Havekes wrote:

> LS,
>
> At the moment I use Authby group to address multiple LDAP servers.  
> In this setup the second ldap server will only get used if the  
> first ldap server is not responding or rejects the request. I would  
> like to load-balance all the requests amongst all available ldap- 
> servers, like  <AuthBy ROUNDROBIN> does for radius-hosts. Is this  
> possible?
>
> My config looks like this:
>
>
>
>
> <Handler xxxxxxxxxxxxx>
>         <AuthBy GROUP>
>         RewriteUsername s/-//g
>         RewriteUsername s/^([^@]+).*/$1/
>                 AuthByPolicy ContinueUntilAccept
>                 <AuthBy LDAP2>
>                         NoDefault
>                         Host xxxxxxxxxxxxxxxxxxxx
>                         Port 389
>                         BaseDN ou=xxxxxxxxxxxxxxxxxxxxx
>                         UsernameAttr cn
>                         ServerChecksPassword
>                         Timeout 5
>                 </AuthBy>
>                 <AuthBy LDAP2>
>                         NoDefault
>                         Host xxxxxxxxxxxxxxxxxx
>                         Port 389
>                         BaseDN ou=xxxxxxxxxxxxxxxxxxxx
>                         UsernameAttr cn
>                         ServerChecksPassword
>                         Timeout 5
>                 </AuthBy>
>                 <AuthBy LDAP2>
>                         NoDe

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list