Hi Alan, See my coments inline.
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Alan DeKok > Sent: Friday, April 30, 2004 15:39 > To: [EMAIL PROTECTED] > Subject: Re: Looping prevention end duplicate accounting > > > "Luis Guido" <[EMAIL PROTECTED]> wrote: > > Is there a way to prevent loops on authentication/accounting? > > Theoretically, yes. Practically, due to wonderful servers like > Merit, it's difficult. > > You can use the "pre-proxy" section to add vendor-specific > attributes to the proxied request, and then reject any new requests > which contain those vendor-specific attributes. But it's not > fool-proof. Right.... You are saying that's virtual impossible to handle all at the Proxy level. I'm trying to replicate one scenario that I have with Radiator, and I guess (just a thought) it would be nice to have it also on FreeRadius. (...) <Client 1.2.3.4> Secret client1secret Identifier client1 </Client> (...) <Handler Realm=client1_realm,Client-Identifier=/^(?!client1$)/> (...) </Handler> This away I no longer depend on the client config to prevent some loop. If a request arrives me from client1, the client1's handler can't be used to forward the request to. The request will be handle somewhere else (ignored or droped. If the server can keep track from what client send the request, it can be use for proxy decisions. > > For the other issue is that a way to store all accounting > locally but > > sending it also to other server based on Realm Proxy? > > Yes. The server does that by default. It does? It's not happening for me. I'm just keeping the local accounting. Have to investigate that part :) Thanks for the tips. And it would be too much to ask for you to consider the previous issue on a next freeradius version? Lu�s Guido > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
