Re: FreeRADIUS and Oracle (and YPDNR)
From: Jakub Wartak <vnulllists_at_pcnet.com.pl>
Date: Fri, 22 May 2009 18:46:10 +0200
Message-Id: <200905221846.10784.vnulllists_at_pcnet.com.pl>
Dnia czwartek, 21 maja 2009 15:31, Hostetter, Jay M napisał:
> I was curious to know if anybody has any experience using Oracle as a
> backend for FreeRADIUS. We're looking at setting up FreeRADIUS and the
> administrators would like to use Oracle RAC for the backend. I'm in the
> "You Probably Don't Need RAC" camp. I would prefer that the radius
> boxes (there would be several) would point to separate Oracle databases
> on separate boxes (all of which would contain snapshots of the
> authentication data). I am told that the radius servers need to
> reference a single source of accounting information (an accounting
> table) so that they can verify whether or not a user is already logged
> in - hence the need for RAC. I skimmed through the FreeRADIUS
> documentation and I see that they allow for load balancing between
> database servers. Therefore I am trying to understand if and single
> accounting table is really needed, or if there is another solution. I'm
> even considering a view that might tie the separate accounting tables in
> the different databases together, although this could pose a problem if
> one of the databases is down. I just thought I'd check to see if
> anybody has experience with this product.
Date: Fri, 22 May 2009 18:46:10 +0200
Message-Id: <200905221846.10784.vnulllists_at_pcnet.com.pl>
Dnia czwartek, 21 maja 2009 15:31, Hostetter, Jay M napisał:
> I was curious to know if anybody has any experience using Oracle as a
> backend for FreeRADIUS. We're looking at setting up FreeRADIUS and the
> administrators would like to use Oracle RAC for the backend. I'm in the
> "You Probably Don't Need RAC" camp. I would prefer that the radius
> boxes (there would be several) would point to separate Oracle databases
> on separate boxes (all of which would contain snapshots of the
> authentication data). I am told that the radius servers need to
> reference a single source of accounting information (an accounting
> table) so that they can verify whether or not a user is already logged
> in - hence the need for RAC. I skimmed through the FreeRADIUS
> documentation and I see that they allow for load balancing between
> database servers. Therefore I am trying to understand if and single
> accounting table is really needed, or if there is another solution. I'm
> even considering a view that might tie the separate accounting tables in
> the different databases together, although this could pose a problem if
> one of the databases is down. I just thought I'd check to see if
> anybody has experience with this product.
First, RadAcct != RadAuth (be sure you understand the differences).
Second, google about radsqlrelay, radspool, radrelay and rlm_sqllog ( example usage: http://vnull.pcnet.com.pl/ideas/freeradius_ha_mysql.png ) as DSLAMs/NAS can load-balance between servers.
Be sure to read: http://os.cqu.edu.au/usr/share/doc/freeradius-1.1.3/radrelay and http://radspool.linkovitch.me.uk/index.php?screen=docs .
-- Jakub Wartak http://vnull.pcnet.com.pl -- http://www.freelists.org/webpage/oracle-lReceived on Fri May 22 2009 - 11:46:10 CDT