RE: Multiple REALMS, multiple SQL

2007-04-15 Thread Andrea Cerrito 
Great, it does the trick :)
It was simplier than I thought.

Another question: is it safe to write into the same sql
server\database\table by 2 radius servers authenticating the same realm?
--
Andrea Cerrito 

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple REALMS, multiple SQL

2007-04-15 Thread Alan DeKok 
Andrea Cerrito wrote:
> How can I let the proxy write in a db just the realm DEF and GHI and ignore
> the realm ABC?

  Do *conditional* logging to SQL.  See Acct-Type, which lets you
conditionally call a module.

> I think it can be done in the post-proxy section of the radius.conf... But
> how?

  Not in post-proxy.  Do it in the "accounting" section.

  Alan DeKok.
--
  http://deployingradius.com   - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Multiple REALMS, multiple SQL

2007-04-14 Thread Andrea Cerrito 
Hi to this list,

I'm using freeradius from few weeks, and now I need a little help to
understand how to configure a proxied configuration to do what I need.

My situation:

[ Proxy Frontend ] -- REALM ABC >> proxied to [ My Radius Server ]
 |
 |- REALM DEF >> proxied to [ My Customer Radius ]
 |
 |- REALM GHI >> proxied to [ My Customer Radius ]

The data about the realm ABC is stored in a database by another server that
I manage, so I keep data without problems.
The data about the realm DEF/GHI is not stored at all because I'm not
managing the final servers.

I cannot store data on the proxy frontend by the simple "sql" configuration
because I'll start to write a lot of useless and doubled data (the real
configuration is more complex then described before).

How can I let the proxy write in a db just the realm DEF and GHI and ignore
the realm ABC?

I think it can be done in the post-proxy section of the radius.conf... But
how?

Thank you
--
Andrea

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html