[RADIATOR] Missing info from error message
A.L.M.Buxey at lboro.ac.uk
A.L.M.Buxey at lboro.ac.uk
Wed Nov 27 13:32:22 CST 2013
Hi,
> It does appear that there are issues cascading RADIATOR servers that are
> all using <AuthBy EAPBALANCE> because the RADIUS "State" attribute used to
> track the EAP conversations gets mangled as the message progresses through
> the chain of servers.
interesting...I dont think that this has been discussed in eduroam (well, certainly
not recently) - and if all servers did this then nothing would work in a proxy system
> To make things work with the US NTLRS servers they graciously stopped
> using EAPBALANCE to load balance between our servers and moved to a
> traditional primary/backup model, but obviously I can't ask everyone to do
> that :-).
;-) in the UK we did trials with EAPBALANCE and it didnt work well with many
of the connecting servers.... we use primary/secondary/tertiary (I'm now wondering
if the US found our doc ;-) )
> The RADIATOR folks recommended I try HASHBALANCE instead, but I like the
> extra assurance that EAP conversations don't get broken up.
yes. the conversation cannot get broken up - both end destinations and middle
boxes dont like that - especially since another middle box could choose a different
destination
alan
More information about the radiator
mailing list