Certainly!
Here's the complete proxy.conf, configured with the mismatch (line 6: type =
auth, and line 60: pool = csu-auth) such that FR exits before completely
loading in debug mode. Changing either of these to match (or just omitting that
pool definition and letting that realm be local) allows FR to load completely.
Thanks for all you do to keep FreeRADIUS working,
Steve
****************
proxy server {
default_fallback = no
}
home_server localhost {
type = auth
ipaddr = 127.0.0.1
port = 1812
secret = thisisnotmyrealsecret
require_message_authenticator = yes
response_window = 20
zombie_period = 40
revive_interval = 120
status_check = status-server
check_interval = 30
num_answers_to_alive = 3
max_outstanding = 65536
}
home_server tlrs1-eduroam-us {
type = auth+acct
ipaddr = 64.57.22.74
port = 1812
secret = thisisnotmyrealsecreteither
require_message_authenticator = yes
response_window = 20
zombie_period = 40
check_interval = 30
num_answers_to_alive = 3
}
home_server tlrs2-eduroam-us {
type = auth+acct
ipaddr = 64.57.22.78
port = 1812
secret = noristhisonemyrealsecret
require_message_authenticator = yes
response_window = 20
zombie_period = 40
check_interval = 30
num_answers_to_alive = 3
}
home_server_pool csu-auth {
type = fail-over
home_server = localhost
}
home_server_pool EDUROAM {
type = fail-over
home_server = tlrs1-eduroam-us
home_server = tlrs2-eduroam-us
}
realm NULL {
}
realm "~(.*\\.)*(colostate|COLOSTATE)\\.(edu|EDU)$" {
pool = csu-auth
}
realm "~.+$" {
pool = EDUROAM
nostrip
}
realm LOCAL {
}
realm DEFAULT {
}
<EOF>
-----Original Message-----
From: freeradius-users-bounces+steven.lovaas=colostate....@lists.freeradius.org
[mailto:freeradius-users-bounces+steven.lovaas=colostate....@lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: Friday, July 12, 2013 3:19 AM
To: FreeRadius users mailing list
Subject: Re: Loading fails without reporting an error
Lovaas,Steven wrote:
> Thanks, Adam... this got me looking at the right thing.
>
> I had a mismatch between the type of the home_server localhost (auth), and
> the attribute used in one of the realms pointing to the pool that references
> that home server (pool, instead of auth_pool). Changing the type of the
> localhost home_server allowed FR to complete loading.
If you have a simple config that can reproduce it, I'd like to fix the
problem.
It's likely just adding a printed error message in the home server code. But
knowing exactly where to add it would be useful.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
