Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) RADIUS - Blocking multiple logins by same user (fwd)
>
> MegaZone wrote:
> >
> > Once upon a time Dale E. Reed Jr. shaped the electrons to say...
> > >logs manually). Only the primary accounting has to go down
> > >to make them stop sending accounting packets for a while.
> >
> > And then we'll start sending to the secondary.
>
> 10 minutes later or 50 requests later?
>
> > "should be" in your opinon. Some users agree with you, some agree with
> > the way we do it. We obvious don't think it 'should' be the way you do,
> > nor does the RFC as it doesn't say either way.
> >
> > Everyone will have their own opinion.
>
> But shouldn't it atleast be confgiurable? I mean Ascend lets you
> configure the ports, timeouts, retries, etc. Livingston doesn't
> let you configure squat. Thats great for simple networks, but I
> like a little control over what my terminal servers are doing, since
> I know my network better than Livingston does.
We have Ascends, Livingstons and terminal servers. It is nice to
have knobs and buttons, it gives a nice feeling that you are the
boss. There is only one problem: they don't often work.
That's also true with these radius settings. We have a dedicated
Linux PPro that acts as a primary radius server. It is in the
same cable as the Livingstons and Ascends. We also have some
other unix hosts named as secondary radius servers.
They are in other segments, behind a Cisco 7000 or two.
The Livingstons just work and use the primary server. The #¤%&/()
ascends suddenly (and randomly) decide that they like to use the
secondaries.
It is not a great problem, we have cron jobs that collect the logs
wherever they are etc. The problem is that the ascends are very
reluctant to use the primary again. If a secondary goes down, the
ascends will not go back to the first without manual fiddling,
they just stop autenthicating.
Maybe we should add some timeout to the ascends, if there is such
a knob somewhere.
VesA
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
References: