JRS - Proxying v2

Hi Alan,

Just to make sure i've got the right idea about v2 realms.
Here is an example config for the Janet Roaming Service, which allows
users at any academic institution in the UK
to authenticate at any other .

The version 1 realm JRS
realm jrs {
type = RADIUS
authhost = roaming1.ja.net:1812
accthost = roaming2.ja.net:1813
secret = theirsecret
nostrip
ldflag = round_robin
}
realm jrs {
type = RADIUS
authhost = roaming2.ja.net:1812
accthost = roaming2.ja.net:1813
secret = theirsecret
nostrip
ldflag = round_robin
}

The version 2 realm JRS
##############
# Server Pools
#
realm jrs {
auth_pool = jrs_auth_balance
acct_pool = jrs_acct_balance
nostrip
}
##############
# Server Pools
#

server_pool jrs_auth_balance {
home_server = jrs1_auth
home_server = jrs2_auth
type = load-balance
}
server_pool jrs_acct_balance {
home_server = jrs1_auth
home_server = jrs2_auth
type = load-balance
}

##############
# Home Servers

home_server jrs1_auth {
type = auth
hostname = roaming1.ja.net
port = 1812
secret = theirsecret
response_window = 20
zombie_period = 40
revive_interval = 120
ping_check = request
ping_interval = 30
num_pings_to_alive = 3
}
home_server jrs1_acct {
type = acct
hostname = roaming1.ja.net
port = 1813
secret = theirsecret
response_window = 20
zombie_period = 40
revive_interval = 120
ping_check = request
ping_interval = 30
num_pings_to_alive = 3
}
home_server jrs2_auth {
type = auth
hostname = roaming2.ja.net
port = 1812
secret = theirsecret
response_window = 20
zombie_period = 40
revive_interval = 120
ping_check = request
ping_interval = 30
num_pings_to_alive = 3
}
home_server jrs2_acct {
type = acct
hostname = roaming1.ja.net
port = 1813
secret = theirsecret
response_window = 20
zombie_period = 40
revive_interval = 120
ping_check = request
ping_interval = 30
num_pings_to_alive = 3
}


Very long, but I can see the advantages :)

Thanks,
Arran
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html