Hello Antonio -
On Wed, 26 Jan 2000, Antonio Coloma wrote:
> Hi everybody!
>
> When I use the Radiator as a proxy RADIUS, how can I make that the
> Radiator retransmit only one Accounting-Request packet, ignore the
> response (Accounting-Response) and don't try resend the
> Accounting-Request if not receives the response (Accounting-Response) ?
>
> Radiator config for that realm is:
>
> <Realm myrealm>
>
> MaxSessions 1
> RewriteUsername s/^([^@]+).*/$1/
>
> AcctLogFileName ./LOGS/detail
> AccountingHandled
> <AuthBy GROUP>
> AuthByPolicy ContinueUntilReject
> <AuthBy DBFILE>
> Filename %D/users
> </AuthBy>
> <AuthBy RADIUS>
> Host aa.bb.cc.dd
> Secret xxxxxx
> NoForwardAuthentication
> AcctPort 1814
> </AuthBy>
> </AuthBy>
> </Realm>
>
Probably the best you can do is as follows. Reverse the order of the AuthBy
RADIUS and AuthBy DBFILE, and limit the AuthBy RADIUS to only one transmission
(no retries). This way if the remote radius does not respond, Radiator will not
resend, but the AuthBy DBFILE will always respond to the original request. Have
a look at section 6.25 in the Radiator 2.14.1 reference manual.
<Realm myrealm>
MaxSessions 1
RewriteUsername s/^([^@]+).*/$1/
AcctLogFileName ./LOGS/detail
AccountingHandled
<AuthBy GROUP>
AuthByPolicy ContinueUntilReject
<AuthBy RADIUS>
Host aa.bb.cc.dd
Secret xxxxxx
NoForwardAuthentication
AcctPort 1814
Retries 0
</AuthBy>
<AuthBy DBFILE>
Filename %D/users
</AuthBy>
</AuthBy>
</Realm>
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
