Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FreeRADIUS XMLRPC sync not working automatically

    pfSense Packages
    1
    3
    1.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jl401812
      last edited by

      Has anyone else had issues getting RADIUS users to sync from one box to another automatically and transparently?  In my case, I know it basically works, because when I go to Services > FreeRADIUS > XMLRPC sync and manually click the save button, everything works like a charm and my RADIUS users on 10.9.9.1 (my primary router) magically show up on 10.9.9.2 (my secondary router).  Nothing happens automatically, however.  The only other way the RADIUS users get synchronized is if I restart the primary server.  Under the FreeRADIUS settings I have enabled "Sync to configured system backup server" option, and everything else is getting synchronized perfectly.  Going to System > High Avail. Sync, I see that Authentication servers is checked. Clicking save there does not make a sync happen.  The really strange thing is that under /var/log/system.log, I see messages on both machines indicating that the RADIUS sync was successful, even though I can clearly see that users did not get transferred to the secondary machine.  Any thoughts?  Tips on how to debug?

      1 Reply Last reply Reply Quote 0
      • J
        jl401812
        last edited by

        More interesting info:

        If I delete a RADIUS user from the primary, it is immediately removed from the secondary (good).

        If I edit a RADIUS user on the primary, it is not changed on the secondary (not good).

        If I add a RADIUS user on the primary, it is not added on the secondary (not good).

        On the primary, if I go to Services > FreeRADIUS > XMLRPC sync, and click the save button, all differences are immediately copied from primary to secondary as you would expect (good).

        1 Reply Last reply Reply Quote 0
        • J
          jl401812
          last edited by

          The "Authentication servers (e.g. LDAP, RADIUS)" checkbox under System > High Avail. Sync doesn't seem to have anything to do with the freeradius2 package because the package continues to try XMLRPC syncs even when that box is not checked.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.