Home / user-30211

petertonoli's questions

Martin Hope
petertonoli
Asked: 2011-08-14 02:57:28 +0800 CST
  • 2

Currently have a FreeRADIUS 1.1.6 server authenticating users from OpenLDAP which are stored in the posixAccount account schema. We've now installed a Cisco WLC, and want to authenticate those users over 802.1X (which is successfully working), but also dynamically assign their computer onto a VLAN based on the MAC address of that computer (we're also using certificates, so the problems of MAC spoofing should be pretty much mitigated).

I've imported the radius schema into OpenLDAP, and have created a cn called dot1x, and based it on the objectClass radiusprofile - so we have an entry like this:

dn:cn=machine-1146,cn=dot1x,dc=org,dc=com
cn: machine-1146
radiusTunnelMediumType: IEEE-802
radiusTunnelType: VLAN
radiusTunnelPrivateGroupId: 600
objectClass: radiusprofile
objectClass: top

The questions are

  • Where in cn=dot1x,dc=org,dc=com do we put the MAC address of the machine?
  • How do I configure FreeRADIUS to search ou=people for user authentication, and then cn=dot1x for the computer MAC address, and then respond with the radiusTunnelPrivateGroupId?

Thanks for your help!

cisco openldap freeradius dynamic-vlan-assignment
Martin Hope
petertonoli
Asked: 2010-01-02 16:12:25 +0800 CST
  • 5

We are going to be migrating our mail server from postfix/courier to Zimbra over the next few months. We've run a prototype server over an iSCSI LUN exported from a Dell Equallogic quite successfully. The Equallogic isn't our 'production' SAN, a NetApp FAS 2050 is.

One of the problems with having a system based on an iSCSI LUN is lack of flexibility. What if we need to resize without having to bring the whole system down? I feel that putting the Zimbra datastore on an NFS export would help in terms of

  • flexibility of resizing at any time without downtime
  • snapshots of past file revisions are easier to access
  • no need to worry about the filesystem getting corrupt / no fsck'in

Cons of switching to NFS

  • speed
  • reliability (?)
  • speed

The question is, whether or not Zimbra (which runs a whole stack of daemons including spamassassin, jetty and most importantly MySQL), will be reliable & stable enough to run under NFS - are we setting ourselves up to lose data running MySQL under NFS? If we do choose to run it under NFS - what can we do to tweak performance?

linux