Hi Guys,
Okay, we decided to go with the realm/user prefix rather than attempting to
rewrite the radius packets to user@realm. I realized (after I came to my
senses) that wouldn't help the situation. :)
So, now I'm trying to setup the "realmslash" module using realm/user realm
prefix scenario and am having a few more problems.
I have the realmslash module setup in radiusd.conf as follows:
realm realmslash {
format = prefix
delimiter = "/"
}
also, my authorize section looks like this:
authorize {
preprocess
suffix
realmslash
files
}
and my preacct section looks like this:
preacct {
preprocess
suffix
realmslash
files
}
The realm is setup in proxy.conf and I am able to test the realm
successfully from the command line directly to the remote radius using the
"radtest" utility.
However, when testing through the proxy, I get a timeout. This is what I am
seeing in the logs.
Wed Feb 19 13:10:18 2003 : Error: Trying to look up name of unknown client
1.2.3.4.
Wed Feb 19 13:10:18 2003 : Proxy: No matching request was found for proxy
reply from server UNKNOWN-CLIENT:1645 - ID 0
Wed Feb 19 13:10:21 2003 : Error: Dropping conflicting packet from client
local-network:43664 - ID: 69 due to unfinished request 0
Wed Feb 19 13:10:22 2003 : Error: Trying to look up name of unknown client
1.2.3.4.
Wed Feb 19 13:10:22 2003 : Proxy: No matching request was found for proxy
reply from server UNKNOWN-CLIENT:1645 - ID 0
Wed Feb 19 13:10:24 2003 : Error: Dropping conflicting packet from client
local-network:43664 - ID: 69 due to unfinished request 0
Wed Feb 19 13:10:25 2003 : Error: Trying to look up name of unknown client
1.2.3.4.
Wed Feb 19 13:10:25 2003 : Proxy: No matching request was found for proxy
reply from server UNKNOWN-CLIENT:1645 - ID 0
Wed Feb 19 13:10:27 2003 : Error: Dropping conflicting packet from client
local-network:43664 - ID: 69 due to unfinished request 0
Wed Feb 19 13:10:28 2003 : Proxy: marking authentication server 1.2.3.4:1645
for realm fakerealm dead
Any ideas? Are my configs correct in radiusd.conf? Any help would be
appreciated.
Thanks!
Darren Nay - [EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
