Alan, > > I do not want to terminate the EAP tunnels for the foreign realms, but I > > have to terminate the local one (@tu-darmstadt.de and NULL) as I have to > > forward the requests to a set of internal radius servers not capable of > > speaking EAP. > > Set Proxy-To-Realm := LOCAL for the realms you want to terminate > locally. Make sure that this is done before the "eap" module is run in > the "authorise" section. > > Then, put the following in the "users" file to proxy the inner request > to another realm: > > DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To-Realm = oldservers
I've already had these rules in user. The final hint was to set authhost = LOCAL in proxy.conf. Now it works as expected. Thanks a lot to all who helped, especially to Alan of course! -Andreas -- Andreas Liebe/Darmstadt University of Technology/+49 6151 16-3150/3050(FAX)
signature.asc
Description: This is a digitally signed message part
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html