> On Mon, Jun 15, 2009 at 10:24:04AM +0100, [email protected] wrote:
>> are you doing local proxy (ie have an entry for math.....nl in
>> proxy.conf?)
>> if so, ensure you define 'nostrip' otherwise the realm will be removed
>> and you cannot use it.
>
> Yes, we have our Realm defined in proxy.conf:
> home_server_pool mi {
> type = fail-over
> home_server = localhost
> }
> realm math.leidenuniv.nl {
> auth_pool = mi
> # nostrip
> }
>
> I tried adding the nostrip option, but as a result radiusd ends up in an
> infinite loop proxy-ing to itself:
> ....
> Proxy-State = 0x313839
> Proxy-State = 0x323035
> Proxy-State = 0x313930
> Proxy-State = 0x323437
> Proxy-State = 0x3933
> Proxy-State = 0x323130
> ...
>
> The Realm indeed remained untouched in the username through out the
> request. How can I stop this loop?
Don't proxy internally. Remove that home server and leave only the realm
as local realm:
realm math.leidenuniv.nl {
}
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
