[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: ldap load-balance
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2022-10-07 18:55:03
Message-ID: A78BE213-50B6-4410-B028-0B956C9E6FDE () deployingradius ! com
[Download RAW message or body]

On Oct 7, 2022, at 2:43 PM, Brantley Padgett via Freeradius-Users \
<freeradius-users@lists.freeradius.org> wrote:
> Wait, just to make sure I understand, if I have a similar setup to the answer in \
> that SO question, it doesn't failover, or are you saying it doesn't do any load \
> balancing?

  I'm saying that the server works as documented.

  The original poster made it *very* clear that he had little intention of reading \
the docs, or doing anything reasonable to solve his problem.

  He asked the list about the functionality of the LDAP module.  When the module \
contains FULL documentation on what it does, and how it works.  When I suggested he \
read that documentation, he didn't.  Instead he found some random post from years \
ago, and went off on a tangent about that.

  This is evidence that he's posting just to stir up trouble.  Or, he's asking \
questions with no intention of paying attention to the answers.  Either way, it's \
unacceptable.

  Read his last message to see what his attitude is.  It in *no way* has anything to \
do with what I said.  So once again, he proves he cannot read the most basic of \
content and understand it.  At that point, it's impossible to help someone.

> I'm running FreeRADIUS Version 3.0.20 from the Ubuntu standard repo: \
> freeradius/focal-updates,now 3.0.20+dfsg-3ubuntu0.1 amd64 [installed]

  I'd recommend 3.0.26 at least.  We have packages on \
http://packages.networkradius.com  They have many features and bug fixes over 3.0.20.

> So looking closer, I didn't realize/understand there was anything like \
> redundant-load-balance. I see that now.  
> Where does the redundant-load-balance statement go?

  In the processing section.  authorize / authenticate / etc.

> I.E. I have my list of servers under raidusd.conf > modules > ldap ...  Putting in \
> the main conf was for ease of writing puppet/ansible modules to install and \
> maintain radius vs multiple files. So would the redundant-load-balance section go \
> under that?

  No.

  Again... the documentation makes it clear where the "load-balance" keyword goes.  I \
really don't know how else to say this.

  Where should we be putt the load-balance documentation so that people will read it?

> Currently looks like:
> # MODULE CONFIGURATION
> modules {
> $INCLUDE mods-enabled/
> ldap {
> server = 'ldap01.example.net'
> server = 'ldap02.example.net'
> server = 'ldap03.example.net'

  That's fine.  The libldap code will handle failover.  As is documented in the \
mods-available/ldap file.

> Should become:

  No.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]