Hi Alan
On Sat, Dec 17, 2011 at 3:47 PM, Alan DeKok al...@deployingradius.comwrote:
Arch Mangle wrote:
I've got radrelay replicating accounting packets from a primary radius
server to a secondary radius server. The secondary radius server is
capable of handling radius accounting/auth
Arch Mangle wrote:
I've got radrelay replicating accounting packets from a primary radius
server to a secondary radius server. The secondary radius server is
capable of handling radius accounting/auth requests if NASes cannot
reach the primary or the primary fails.
...
However, when I test
Hi List
I have a working radrelay configuration running on FreeRADIUS Version
2.1.10 for debian linux (squeeze/sid). It successfully duplicates radius
accounting packets from the detail file to the remote server. However, I
see that the Realm Attribute, while logged in the detail file
Hi,
On Fri, Dec 16, 2011 at 03:52:39PM +0200, Arch Mangle wrote:
I have a working radrelay configuration running on FreeRADIUS Version
2.1.10 for debian linux (squeeze/sid). It successfully duplicates radius
accounting packets from the detail file to the remote server. However, I
see
Hi Matthew
Thanks for your response. This turns out to be exactly the configuration I
needed! I've tested it successfully on a failover pair of servers each
replicating accounting packets to each other using radrelay.
Many thanks!
Arch
On Fri, Dec 16, 2011 at 6:17 PM, Matthew Newton m
Hi List
I've got radrelay replicating accounting packets from a primary radius
server to a secondary radius server. The secondary radius server is capable
of handling radius accounting/auth requests if NASes cannot reach the
primary or the primary fails. I want to replicate packets from
to get it?
Thanks.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-radrelay-tp4918721p4924613.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
tonimanel wrote:
I guess that it's normal but I would like to know it. I have configured two
servers with robust-proxy-accounting model. My doubt is, when radiusA server
writes a record into database, writes Its current time and then sends
accounting packet to radiusB server (proxying).
I did not write the output result.
The first server only writes in detail file if it is not launch with -n
radrelay option.
That's how it's supposed to work.
Yes, but I want to say that only writes in detail_file (second detail file)
when it's launch without -n radrelay option, when
On Thu, Oct 20, 2011 at 4:31 PM, tonimanel
antoniofernan...@fabergames.com wrote:
I did not write the output result.
The first server only writes in detail file if it is not launch with -n
radrelay option.
That's how it's supposed to work.
Yes, but I want to say that only writes
tonimanel wrote:
Yes, but I want to say that only writes in detail_file (second detail file)
when it's launch without -n radrelay option, when it should writes in
detail_file (second detail file) with or without -n option, I think.
No. You don't understand what -n means. It's documented
Thank you very much to all!
I have gotten configurate freeradius logging with mysql, writting in detail
file and radrelay reading from this detail file. Now I am testing this with
100 requests.
I have understood freeradius protocol and differences between AAA
(Authorization, Authentication
Hi everybody,
I had configured freeradius with mysql and writting in a second detail. This
second file was readed by radrelay and accounting data was replicated
between both servers. All worked fine.
Now when I have tried to configure a second radrelay on the second server
(that only recieved
tonimanel wrote:
Now when I have tried to configure a second radrelay on the second server
(that only recieved account data from the other server), first radrelay from
the first server not works and all the system not works fine.
See the FAQ for it doesn't work
The first server only
Any body can help me? Please!! I need to get a good configuration!
Thanks!
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4909025.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info
On Mon, Oct 17, 2011 at 2:50 PM, tonimanel
antoniofernan...@fabergames.com wrote:
Any body can help me? Please!! I need to get a good configuration!
Step back for a moment. You want to run when you can't even walk.
Try answering these questions:
(1) Do you REALLY understand what this
help.
Thanks. I hope your answers.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4909625.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http
On Mon, Oct 17, 2011 at 6:42 PM, tonimanel
antoniofernan...@fabergames.com wrote:
Thank you for your answer. I am going to follow this guide. I think that
there are some points that maybe it isn't necessary for the objective.
I can tell you that:
1.- I thought that the achieve of this
to begin with a original
configuration files, with basic functionality and I'm going to work to get
write accounting records in detail file.
Regards,
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4909812.html
Sent from
sysconfdir = /etc
localstatedir = /var
sbindir = ${exec_prefix}/sbin
logdir = /var/log/freeradius
raddbdir = /etc/freeradius
radacctdir = ${logdir}/radacct
name = radrelay
confdir = ${raddbdir}
run_dir = ${localstatedir}/run/${name}
libdir = @libdir@
pidfile = ${run_dir}/${name}.pid
max_request_time
file /etc/freeradius/modules/expr
including configuration file /etc/freeradius/modules/passwd
including configuration file /etc/freeradius/modules/realm
including configuration file /etc/freeradius/modules/radrelay-detail
including configuration file /etc/freeradius/modules/radutmp
including
-Session-Id, NAS-IP-Address,
Client-IP-Address, NAS-Port
}
Module: Checking accounting {...} for more modules to load
/etc/freeradius/sites-enabled/default[365]: Failed to load module
radrelay-detail.
/etc/freeradius/sites-enabled/default[360]: Errors parsing accounting
section.
I don't know how I
tonimanel wrote:
After that to modify the configuration files, when I lunch freeradius -X I
get this output:
...
Module: Checking accounting {...} for more modules to load
/etc/freeradius/sites-enabled/default[365]: Failed to load module
radrelay-detail.
/etc/freeradius/sites-enabled
On 10/13/2011 09:31 AM, tonimanel wrote:
Thanks for your answer Alan.
I haver in modules directory radrelay-detail file with this code:
No you don't
# -*- text -*-
#
# $Id$
# Write a detailed log of all accounting records received.
#
detail {
This is a module called detail
Did you
On Thu, Oct 13, 2011 at 3:31 PM, tonimanel
antoniofernan...@fabergames.com wrote:
Thanks for your answer Alan.
I haver in modules directory radrelay-detail file with this code:
File name doesn't really matter. Instance name does.
# -*- text -*-
#
# $Id$
# Write a detailed log of all
Yes, I have copied detail file with radrelay-detail name. This is wrong? So,
how I have to define this module? I thought that this was enough.
I should to undo this change, ok?
Thanks for your answer.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my
Hi,
Yes, I have copied detail file with radrelay-detail name. This is wrong? So,
how I have to define this module? I thought that this was enough.
freeradius doesnt care about the NAME of the file. it cares about the
instance name configured in the file
eg
file = mschap
mschap {
}
file
if I need anything else to get this.
After I will write the news.
Thanks nad regards!
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4898858.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List
Ok, the service running ok. The authentication and accounting it's ok only in
one server, in the other server not appears nothing about accounting, so the
synchronization not function correct.
What can to be happening?
I have in radrelay.conf a home_server such as radrelay with this code
Hi,
Ok, the service running ok. The authentication and accounting it's ok only in
one server, in the other server not appears nothing about accounting, so the
synchronization not function correct.
can the servers talk to each other? your config has port 1812 ...is that meant
to be?
alan
-
tonimanel wrote:
Thanks for your answer Alan.
I haver in modules directory radrelay-detail file with this code:
There was an example posted here earlier. Use it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
checked that the main server is
writing to the same file that radrelay is reading?
The default configuration *should* work, with minimal changes. Just
take the default configuration, and change raddb/modules/detail:
detailfile = ${radacctdir}/detail
That is the *only* configuration you
Do you know if I must to configure two servers or only one is necessary?
Thanks again.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4899608.html
Sent from the FreeRadius - User mailing list archive at Nabble.com
this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4899773.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I remember that this problem indicates that I should to define something in
modules (radiusd.conf). I think that I have done it and the result is the
same.
Inside of modules directive I have written this:
detail detail-relay{
}
I hope you've written more than that in that
Hi,
After append inside modules section of radrelay.conf file this code:
detail {
detailfile = /var/log/freeradius/radacct/detail
detailperm = 0600
dirperm = 0755
locking = no
}
When I lunch freeradius -X -n radrelay appear this:
root@debian:/etc/freeradius# freeradius -X -n radrelay
I have changed the line detailfil that was wrong. I have written this:
detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d
And the output is:
root@debian:/etc/freeradius# freeradius -X -n radrelay
FreeRADIUS Version 2.1.10, for host i486-pc-linux-gnu, built on Nov 14 2010
at 20:41:03
tonimanel wrote:
After append inside modules section of radrelay.conf file this code:
...
When I lunch freeradius -X -n radrelay appear this:
...
Polling for detail file /var/log/freeradius/radacct/detail
Detail listener /var/log/freeradius/radacct/detail state unopened signalled
0 waiting
tonimanel wrote:
I supposed this too (detail file not exist), so read process fails.
So, I should to configure in radiusd.conf the server to write to the detail
file. Then in radrelay.conf, the configuration is correct? Now radrelay is
configurated to read detail file, ok? I think
tonimanel wrote:
Now, I have configured radiusd.conf with this code:
...
That should read from the detail file...
And radrelay.conf with this code:
listen {
...
identity = radrelay
What's identity ?
I *always* get worried when people do things which aren't necessary
configuration files and then I will
write the output.
Thanks again.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Problems-with-my-radrelay-configuration-tp4876089p4892232.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe
Hi,
When I launch freeradius with -X and -n radrelay options, I get this
message:
Detail listener /var/log/freeradius/radacct/detail state unopened signalled
0 waiting 0.851083 sec
The radacct directory exists, but the detail file not exists, is it an
error? What's happened?
I post the result
On 6 Oct 2011, at 14:12, tonimanel wrote:
Hi,
When I launch freeradius with -X and -n radrelay options, I get this
message:
Detail listener /var/log/freeradius/radacct/detail state unopened signalled
0 waiting 0.851083 sec
The radacct directory exists, but the detail file not exists
Hello Alan,
Etienne Pretorius wrote:
When I change the REALM to the following:
realm IPASS {
nostrip
#pool = IPASS
Proxy-To-Realm := LOCAL
}
It won't work. You can't put proxy-To-Realm there.
It was only to demonstrate that when I have the pool active then the
Etienne Pretorius wrote:
When I change the REALM to the following:
realm IPASS {
nostrip
#pool = IPASS
Proxy-To-Realm := LOCAL
}
It won't work. You can't put proxy-To-Realm there.
It works, but now this server can not authenticate for IPASS.
So I am sure that something
Hello List,
I have a problem with radrelay and specifically the IPASS Realm.
Attached is the dump of the freeradius -X run.
This is the scenario:
I have a server that is radrelaying packets to another server. But for
some reason - specifically only the RADIUS realm - it tries to proxy
Hello List,
[IPASS] Looking up realm IPASS for User-Name = IPASS/*USERNAME*
[IPASS] Found realm IPASS
[IPASS] Adding Realm = IPASS
[IPASS] Proxying request from user *USERNAME* to realm IPASS
[IPASS] Preparing to proxy accounting request to realm IPASS
There is no packet that leaves this server
Hello List,
When I change the REALM to the following:
realm IPASS {
nostrip
#pool = IPASS
Proxy-To-Realm := LOCAL
}
It works, but now this server can not authenticate for IPASS.
So I am sure that something is wrong with radrelaying to a realm that
needs to acct off another
Craig Campbell wrote:
We are upgrading from ancient radius servers to current, and discovered the
radrelay program no longer exists.
See http://git.freeradius.org/pre/
The pre release of 2.1.7 has a sample radrelay.conf file.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http
you need to
send duplicate accounting records to.
2) Run a radrelay process to scan (and truncate) the detail_relay
file as it is written to and read fully.
New way is?:
a) radiusd process relays records from existing detail files to
other radius accounting (home) servers
Hi.
FreeRadius 2.1.6 running in Redhat Linux AS5.3
We are upgrading from ancient radius servers to current, and discovered the
radrelay program no longer exists.
Despite my best efforts, I have failed to configure relaying correctly. I
think I am including below the required changes. I hope
Sending Accounting-Response of id 70 to 192.168.1.101 port 50125
Finished request 0.
Cleaning up request 0 ID 70 with timestamp +1
Going to the next request
Waking up in 0.3 seconds.
You have cut off the debug at the interesting point. Does it poll the
detail file after these 0.3 seconds. It
@lists.freeradius.org
Sent: Monday, August 31, 2009 3:25 PM
Subject: Re: Simple Accounting 'radrelay' functionality - Version 2.1.6
Sending Accounting-Response of id 70 to 192.168.1.101 port 50125
Finished request 0.
Cleaning up request 0 ID 70 with timestamp +1
Going to the next request
Waking up in 0.3 seconds
Jihad Jaafar wrote:
Thank for that ok
that's the listen part where is the part that send the acct record to
the billing server
It's a normal server policy. You will need to create it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I any one can Help
We just upgraded from 1.1.3 to 2.1.6
and I use radrelay to pass the accounts data to my billing server
using this command
radrelay -a /var/log/radius/radacct/192.168.26.251 -s ZZ -r
ds9.xxx.net:1646 detailfile
reading the doc of 2.1.6 thinks have changed but I
Jihad Jaafar wrote:
reading the doc of 2.1.6 thinks have changed but I can't see what's
going on
please can any one help
on what I need to do in version 2.x.x to do the same thing
You need to configure a listen section that reads the detail file.
See
Thank for that ok
that's the listen part where is the part that send the acct record to
the billing server
Alan DeKok wrote:
Jihad Jaafar wrote:
reading the doc of 2.1.6 thinks have changed but I can't see what's
going on
please can any one help
on what I need to do in version
I found FreeRadius 2.1.1 very easy to setup for
authentication however,
I am experiencing problems in setting up the accounting
with 2 servers.
Radrelay was very simple and although I have found lots of
information on
the radrelay function built in to FreeRadius, I have not
been able
in setting up the accounting
with 2 servers.
Radrelay was very simple and although I have found lots of
information on
the radrelay function built in to FreeRadius, I have not
been able to get it working.
Is there a shortcut, Howto or instructions on what files
need to be changed to
get
Yes, Thank you.
I have read many of them but they are not specific to Radrelay replacement.
The most noted is in the: copy-acct-to-home-server File.
# You will have to configure realms, home_server_pool, and home_server in
proxy.conf
# for this to work.
Does this mean all 3 have to be setup
...@heartoftn.net wrote:
I found FreeRadius 2.1.1 very easy to setup for authentication
however,
I am experiencing problems in setting up the accounting with 2
servers.
Radrelay was very simple and although I have found lots of
information on
the radrelay function built in to FreeRadius, I have
The most noted is in the: copy-acct-to-home-server File.
# You will have to configure realms, home_server_pool, and home_server in
proxy.conf
# for this to work.
Does this mean all 3 have to be setup in the proxy.conf file?
Is there a proxy.conf file with these setup as an example?
I have not
= radius.company.com:1601
secret = testing123
}
- Original Message -
From: t...@kalik.net
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, December 16, 2008 5:32 PM
Subject: Re: Radrelay
The most noted is in the: copy-acct-to-home-server File
Larry Reeves wrote:
I assume any change is done only in the proxy.conf
I tried to take the simple option and just setup the realm.
I edited these lines on both servers to my hostnames but it still fails
to work.
See the FAQ for it doesn't work.
The documentation explains how the server
Hi Alan,
Thanks for the advice. Will look into upgrading to 2.0.5. As this is
production system, will need to plan for it.
Best Regards,
Ryan
Date: Tue, 12 Aug 2008 17:45:37 +0200
From: Alan DeKok [EMAIL PROTECTED]
Subject: Re: Help needed for radrelay under 1.1.3
To: FreeRadius users
Hi All,
Need some help on radrelay for 1.1.3 if possible. I have a radius
setup whereby there are two radius, one for
authorization/authentication and one for accounting. The one doing
authorization/authentication will relay the accounting detail using
radrelay to the other radius which
Ryan wrote:
Need some help on radrelay for 1.1.3 if possible.
Upgrade to 2.0.5. The radrelay functionality is integrated into the
server core, and works much better than 1.1.x.
Have tried running radrelay in debug mode but was not able to find any
error other than the following
rad_verify
Hi there,
I wonder if there's an easy way/guide to reproduce the
freeradius 1.x radrelay behavior?
I'm afraid that the copy-to-home-server solution does not
execute the accounting requests, but only relays them. Am I right?
I want to execute accounting requests and relay these packets
locally and proxy to a remote server.
kind regards
pshem
2008/7/29 Raffael Himmelreich [EMAIL PROTECTED]:
Hi there,
I wonder if there's an easy way/guide to reproduce the
freeradius 1.x radrelay behavior?
I'm afraid that the copy-to-home-server solution does not
execute the accounting requests
Pshem Kowalczyk wrote:
I'm not sure what you mean by 'execute' but you can configure a
virtual server that simply reads a detail file. Packets 'received'
this way are treated as any other packets received over the network.
If you make multiple copies of the packets (to multiple detail files)
the information and replicate to all
radius servers.
I need to know why the radrelay application stops replacation when it
comes across a 0 session length packet.
This morning I found a 40Mb backlog file for each server and realised
that it was the 0 session-length packet again.
I know FreeRadius
Etienne Pretorius wrote:
I need to know why the radrelay application stops replacation when it
comes across a 0 session length packet.
Because the RADIUS server says that the accounting packet was not
processed, so radrelay tries to send it again. This is what a NAS does
when it does
to log the information and replicate to all
radius servers.
I need to know why the radrelay application stops replacation when it comes
across a 0 session length packet.
This morning I found a 40Mb backlog file for each server and realised that
it was the 0 session-length packet again.
I
Alan DeKok wrote:
Etienne Pretorius wrote:
I need to know why the radrelay application stops replacation when it
comes across a 0 session length packet.
Because the RADIUS server says that the accounting packet was not
processed, so radrelay tries to send it again. This is what
Upgraded to 2.0.2 and got the radrelay working using proxy.conf
Ryan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 08/02/2008, Alan DeKok [EMAIL PROTECTED] wrote:
{cut}
Please check that you've actually updated the source. The debug log
you posted did NOT include the new debug messages I added as part of
this fix. This suggests that you are NOT using the fix in your tests.
You were right - it
Pshem Kowalczyk wrote:
It looks like there is still issue with reading from the file. From
the debugging I did I think that the problem is with freeradius
noticing that it already got to the end of the .work file and should
close it.
What does that mean?
My C foo is not very strong, but
{cut}
It looks like there is still issue with reading from the file. From
the debugging I did I think that the problem is with freeradius
noticing that it already got to the end of the .work file and should
close it.
What does that mean?
That freeradius renames the detail file to
Pshem Kowalczyk wrote:
As I said - my C skills are not very good. From my understanding -
freeradius can't see that it got to the end of the .work file and it's
time to close it and move on.
Why? That line of code checks if it's at the end of the file.
At this stage the .work file is
Hi
{cut}
You will likely need to grab CVS head, as I've just committed a patch
to fix some issues with reading the detail file.
It looks like there is still issue with reading from the file. From
the debugging I did I think that the problem is with freeradius
noticing that it already got
Dear Everyone,
Need some advise/help on configuring the proxy.conf to replicate the
radrelay function that was available in v1.1.3. However was not able
to find any information so far as the radrelay has been deprecated in
v2.0.1.
Previously I had use /usr/local/bin/radrelay -n
Ryan wrote:
Need some advise/help on configuring the proxy.conf to replicate the
radrelay function that was available in v1.1.3. However was not able
to find any information so far as the radrelay has been deprecated in
v2.0.1.
radrelay has been replaced by radiusd reading directly from
servers. Has this functionality been removed?
No.
There is
no mention of it in the man page or the example configuration, but I would
hope
it's in there somewhere, otherwise radrelay should probably still exist.
Grab a copy of the CVS head. See
raddb/sites-available/copy-acct-to-home
been removed? There is
no mention of it in the man page or the example configuration, but I would hope
it's in there somewhere, otherwise radrelay should probably still exist.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
logs to two separate servers
using two separate files and two separate instances of radrelay, but as you can
see, I appear to be losing some packets. While a majority of the accounting is
passing, I'd much prefer all of it to pass. It's logged on the box, but other
devices need to use
Good morning, freeradius users. I have 2.5 questions.
1. Can radrelay be used with multiple accounting directories? I have
multiple (7) directories with files I need to be watching with
radrelay. I haven't been able to get radrelay to work properly when I
use -a /accounting-dir/ multiple times
I am doing the following and have an issue
Issue is on the primary I get duplicate entry on accounting in mysql for a user
I don't use this accounting for nothing but users online listing, I have to use
accounting from the detail file for that.
Ok heres the expanation
I use radrelay so each
seconds runs through its hoop, but never processes anything like it had
nothing to do
Do you mean: the server never gets anything? Then maybe radrelay is blocked on
an intermediate firewall? If the packets get lost en-route, you have to look
there...
In any case, actually *sending* us
PROTECTED]
To: FreeRadius users mailing list [mailto:[EMAIL PROTECTED]
Sent: Tue, 19 Jun 2007 02:34:23 -0400
Subject: Re: Freeeradius 1.16 and Radrelay Not updating
seconds runs through its hoop, but never processes anything like it had
nothing to do
Do you mean: the server never gets anything
I have Freeradius installed on two opensuse 10.2 servers
Running Freeradius 1.16
I am running radrelay on the two too keep the detail files in sync
(New Setup)
The combined detail work file is created on the two servers and each appear to
write to it ok.
But they aren't transferring with one
Jeff wrote:
...
The combined detail work file is created on the two servers and each appear
to write to it ok.
But they aren't transferring with one another
What *are* they doing? You can run the radrelay *and* server in
debugging mode, to see what is going on.
If you're not doing
I tried running both in debug, and basically only thing happening is the info
is going into the
combined file on the server that took the request but radrelay running in the
debug mode on that same server
about ever 50 seconds runs through its hoop, but never processes anything like
it had
I have Freeradius installed on two opensuse 10.2 servers
Running Freeradius 1.16
I am running radrelay on the two too keep the detail files in sync
(New Setup)
The combined detail work file is created on the two servers and each appear to
write to it ok.
But they aren't syncing with one
German Hernandez wrote:
Hello everybody!
I need your help. I want generate accounting replication with radrelay, I
read doc/radrelay, but is not clear for me where(in what file configuration)
I add the line that fire up radrelay (radrelay -S secret_file server
detail-combined
I have Freeradius installed on two opensuse 10.2 servers
Running Freeradius 1.16
I am running radrelay on the two too keep the detail files in sync
(New Setup)
The combined detail work file is created on the two servers and each appear to
write to it ok.
But they aren't syncing
Hello everybody!
I need your help. I want generate accounting replication with radrelay, I read
doc/radrelay, but is not clear for me where(in what file configuration) I add
the line that fire up radrelay (radrelay -S secret_file server
detail-combined).
Thank in advance
German
Milan Holub wrote:
...
== I works for me well(incomming accounting/authorization packet containing
Freeradius-Proxied-To is no more sent to IP present as a value of the
attribute); this might not work for home servers which listen on
non-standard ports(due to dst_port passed in to
Milan Holub wrote:
Firstly I wanted to put the entry into preproxy_users where it did not
work properly: I could see that the realm was set correctly to LOCAL
but at the same time there was an attempt to send the packet to remote
home_server:
Proxying request 0 to realm LOCAL, home server
Milan Holub wrote:
== my humble attempt to add the backwards compatibility for
Freeradius-Proxied-To attribute:
In 2.0.0, the detail file reader looks for Packet-Src-IP-Address
Packet-Dst-IP-Address. The detail module needs to write these, too.
Then, the realm module needs to be updated
the same result.
Now when I'm relaying some accounting packets to my freeradius server
using radrelay binary from 1.1.6 and there is a packet which has
already Freeradius-Proxied-To attribute set then freeradius 2.0(cvs head)
just ignores it and tries to proxy the packet to remote home server
1 - 100 of 242 matches
Mail list logo
