Using FreeRADIUS CVS dated 6/10/2002 on FreeBSD 4.5-STABLE...
I'm trying to prevent accounting data that is being proxied to a remote
RADIUS server from being handled by any of the modules in accounting{}.
According to doc/module_interfaces:
"For each Accounting-Request that comes to the server, the preacct{} block
is called, followed by the accounting{} block. accounting{} is skipped if
preacct{} sets Proxy-To-Realm."
Unless I'm mistaken, rlm_realm will add a Proxy-To-Realm attribute during
preacct{}, which, if doc/module_interfaces is correct, should prevent
accounting{} from handling the packet. The packet _is_ getting handled,
however, and duly logged via my detail and sql modules. I tried adding a
DEFAULT to acct_users to add a Proxy-To-Realm, just in case rlm_realm
wasn't adding the attribute. files and preacct{} matched and returned
'ok', but accounting{} still received the request.
Am I missing something terribly obvious here?
I'm by no means a qualified programmer, but looking at src/main/acct.c it
seems that maybe there isn't an opportunity for FreeRADIUS to skip
accounting{} when Proxy-To-Realm is set? However, that's just conjecture,
and I'm ignorant. Any input is appreciated. Thanks.
Franklin
--
Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth,"
UNIX Systems Administrator | but rather, "I have found a truth."
Lighthouse Communications |
[EMAIL PROTECTED] | Say not, "I have found the path of the soul."
(515)244-1115 | Say rather, "I have met the soul walking
(888)953-3278 | upon my path."
http://www.lh.net |
| -Kahlil Gibran, _The Prophet_, 1923
|
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
