Chapter 13

Pop quiz – troubleshooting

  1. On Debian and Ubuntu the FreeRADIUS server binary is called freeradius instead of radiusd when you install the standard FreeRADIUS package.
  2. You can create named instances of the ldap module that will use the slower servers. Then you can replace the ldap entry in the authorize section with a redundant section that lists the module using the fast LDAP server first and thereafter ldap module instances using the slower ones.
    #ldap
    redundant {
        ldap
        ldap.slow1
        ldap.slow2
    }

    If you use the 'bind as' authentication method for LDAP you also need to change the Auth-Type LDAP in the authenticate section to the following:

    Auth-Type LDAP {
        redundant {
            ldap
            ldap.slow1
            ldap.slow2
        }
    }
  3. The supplicant on Bob's machine is probably ...

Get FreeRADIUS Beginner's Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.