"Darren Nay" <[EMAIL PROTECTED]> wrote:
> Hmm.. Well, I did some more testing.  The IP address that the server was not
> recognizing on the replies is the same IP that the server is proxying to.

  OK.

> So I added an entry to clients.conf for the IP.  To make sure that the
> server recognizes the IP.  (I usually don't need to do this for @suffix.com
> realms).

  Yeah, I just poked the CVS head, so those messages won't appear in
the next version.

> It's recognizing the client IP now, but it still doesn't respond.  It looks
> to me like it can't find the request to reply to when the radius responds.

  The issue is that it:

- sends the proxied request
- remembers the proxied request
- receives the reply from the proxy
- looks for a matching proxied request

  It appears that when it gets the reply from the home server, it's
not matching it to the proxied request.  I don't know why that would
be happening.

> Wed Feb 19 13:50:12 2003 : Proxy: marking authentication server
> 66.101.136.40:1645 for realm fakerealm dead

  Hmm... so there are no replies coming from 66.101.136.40:1645.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to