Re: Proxy accounting problem
Stephan Jaeger [EMAIL PROTECTED] wrote:
i'm having a proxy problem with newer freeradius versions. While 0.9.2
as a proxy send an accounting response for a request which wasn't to be
proxied and with an empty accounting section (in radiusd.conf), newer
versions at least everything = snapshot 2004/21/06 and = 1.0.1 just
ignore the request.
Yes. That's because the accounting section returns noop, which
means nothing was done with the packet, which means it wasn't
accounted for, and the server shouldn't respond.
As i'd like to just drop these (administrative) tickets or better write
them to a detail file it would be good just beeing able to send an
accounting response, but if i let the detail module on the proxy handle
this it logs every request, not just the ones that don't get proxied.
The simplest way to fix this would be to configure rlm_detail to use
the realm name for the detail file:
detailfile = /detail-%{Realm:-LOCAL}
You will get a detail file per realm, and another detail file
containing only local requests.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Proxy accounting problem
Hi,
thanks, for your fast answer.
On Fri, 2004-09-24 at 10:29 -0400, Alan DeKok wrote:
Stephan Jaeger [EMAIL PROTECTED] wrote:
i'm having a proxy problem with newer freeradius versions. While 0.9.2
as a proxy send an accounting response for a request which wasn't to be
proxied and with an empty accounting section (in radiusd.conf), newer
versions at least everything = snapshot 2004/21/06 and = 1.0.1 just
ignore the request.
Yes. That's because the accounting section returns noop, which
means nothing was done with the packet, which means it wasn't
accounted for, and the server shouldn't respond.
That makes sense :)
As i'd like to just drop these (administrative) tickets or better write
them to a detail file it would be good just beeing able to send an
accounting response, but if i let the detail module on the proxy handle
this it logs every request, not just the ones that don't get proxied.
The simplest way to fix this would be to configure rlm_detail to use
the realm name for the detail file:
detailfile = /detail-%{Realm:-LOCAL}
You will get a detail file per realm, and another detail file
containing only local requests.
But it's not possible to get only one detail file with the local
tickets? Currently the detail files are written on the home servers not
on the proxy server.
Regards
Stephan Jaeger
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Proxy accounting problem
Stephan Jaeger [EMAIL PROTECTED] wrote:
But it's not possible to get only one detail file with the local
tickets?
Yes. You can set Acct-Type for the non-proxied requests, and have a
sub-section of accounting{}, with that Acct-Type, and put detail
inside of it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Proxy accounting problem
On Fri, 2004-09-24 at 11:10 -0400, Alan DeKok wrote:
Stephan Jaeger [EMAIL PROTECTED] wrote:
But it's not possible to get only one detail file with the local
tickets?
Yes. You can set Acct-Type for the non-proxied requests, and have a
sub-section of accounting{}, with that Acct-Type, and put detail
inside of it.
Great, works like a charme, thanks a lot.
Regards
Stephan Jaeger
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
