[RADIATOR] RADIUS Proxy for Auth Request on > 1 RADIUS servers

Heikki Vatiainen hvn at open.com.au
Tue Jan 12 05:23:12 CST 2016


On 12.1.2016 9.52, SinTeZ Wh1te wrote:

> I want to do if it's possible to proxy auth request in a
> redundant fashion.
>
> On each requests, I want to proxy it to a primary server, if it's
> success then move on.
> If the auth fails (Access-Reject), I need to proxy Access-Request to a
> secondary server

You could configure an AuthBy RADIUS clause with ReplyHook. The hook 
would check the reply and in case of Access-Reject, look up the AuthBy 
RADIUS clause for secondary server, call it and let it proxy the request 
to the secondary server.

For more information, see the Radiator reference manual section '5.31.19 
ReplyHook' and '5.31.20 NoReplyHook'. Search for ReplyHook in the 
configuration samples in Radiator distribution gooodies/ directory.

https://open.com.au/radiator/ref.pdf

Thanks,
Heikki

-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS, 
NetWare etc.


More information about the radiator mailing list