Re[2]: Replicate-To-Realm not always has effect

[Andrei Koulik]

Hello Andrei,

Look at code fragment from proxy.c:

        proxypair = pairfind(request->config_items, PW_PROXY_TO_REALM);
        replicatepair = pairfind(request->config_items, PW_REPLICATE_TO_REALM);        
                                              
        if (proxypair) {                                                               
                                              
                realmpair = proxypair;                                                 
                                              
                replicating = 0;                                                       
                                              
        } else if (replicatepair) {                                                    
                                              
                realmpair = replicatepair;                                             
                                              
                replicating = 1;                                                       
                                              
        } else {                                                                       
                                              
                /*                                                                     
                                              
                 *      Neither proxy or replicate attributes are set,                 
                                              
                 *      so we can exit from the proxy code.                            
                                              
                 */                                                                    
                                              
                return 0;                                                              
                                              
        }                                                                              
                                              

   so you can either proxy request or replicate it but not both.
   As i see in radiusd.c it is not trivial.

   May be some one makes all those futures - it will be really cool.

Monday, August 06, 2001, 6:23:41 PM, you wrote:

AK> Hello Andrei,

AK> Monday, August 06, 2001, 6:02:16 PM, you wrote:


AK>> I am using two freeradius server (snapshot 20010805)
AK>> first (G) - gateway - decide who must authenticate request (using realms)
AK>> second (A) - account server - do some authentication/authorization and
AK>>        accounts all requests


AK>  I need server G sends authentication and account packets to
AK> particular radius server and ALWAYS duplicates account information to A.


AK>> I tried to solve this problem using acct_users file and attribute 
Replicate-To-Realm
AK>> but it works only if A authorizes request himself.

AK>> Can I implement such scheme using standard tools only.



AK>> - 
AK>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html