Problem with proxy-radius function

banga man_gust at yahoo.com
Thu Apr 10 19:11:40 CEST 2008


Hello All. 
I Use freeradius  2.0.3 only for accounting purpose. 
More than that,  I have dozen realms that should be counted locally, and
only one that should be proxed to redundant AAA servers. 
My current configuration is the next:
>cat clients.conf
client test1 {                                                                                                                       
        ipaddr = 192.168.100.1
        secret          = somesecret                                                                                                      
        shortname       = test1                                                                                                      
        nastype     = other                                                                                                         
}                                                                                                                                   
                                                                                                                                    
client test2 {                                                                                                                       
        ipaddr = 192.168.100.2                                                                                                      
        secret          = somesecret
        shortname       = test2                                                                                                      
        nastype     = other                                                                                                         
}                                            


>cat proxy.conf
proxy server {                                                                                                                      
        default_fallback = no                                                                                                       
}                                                                                                                                   
                                                                                                                                    
home_server test1 {                                                                                                                  
        type = acct                                                                                                                 
        ipaddr = 192.168.100.1
        port = 1646                                                                                                                 
        secret = somesecret
        status_check = request                                                                                                      
        }                                                                                                                           
                                                                                                                                    
home_server test2 {                                                                                                                  
        type = acct                                                                                                                 
        ipaddr = 192.168.100.2
        port = 1646                                                                                                                 
        secret = somesecret
        status_check = request                                                                                                      
        }                                                                                                                           
                                                                                                                                    
home_server_pool test {                                                                                                              
        type = fail-over                                                                                                            
        home_server = test1                                                                                                          
        home_server = test2                                                                                                          
        }                                                                                                                           
                                                                                                                                    
realm dialup.domain.com {                                                                                                                 
        acct_pool = test                                                                                                             
        nostrip                                                                                                                     
        }                                                                                                                           
    >cat default
preacct {                                                                                                                           
        suffix                                                                                                                      
}                                                                                                                                   
                                                                                                                                    
accounting {                                                                                                                        
        acct_unique                                                                                                                 
        sql                                                                                                                         
} 

In case if radius work like daemon I can see next massages in the log
(different time different):
Error: Ignoring request from unknown home server 192.168.100.2 port 1646 
Error: Rejecting request 2583 due to lack of any response from home server
192.168.100.2
Error: Ignoring request from unknown home server 192.168.100.1 port 1646 
Error: Rejecting request 2545 due to lack of any response from home server
192.168.100.1

In case if radiusd –X than I get Segmentation fault:

Like example:
Rejecting request 602 due to lack of any response from home server
192.168.100.2 port 1646
Finished request 602.
Cleaning up request 602 ID 152 with timestamp +102
Cleaning up request 602 ID 0 with timestamp +102
Segmentation fault

1) Why “unknown home server” ?  clients.conf has this IPs?
2) Why Segmentation faul on –X ? After hours of test I decide that it’s
because of my configuration. (proxy.conf incorrect?)
3) Then I debug on realm that should accounting locally i can see the next:
++[acct_unique] returns ok
    rlm_realm: Looking up realm "domain.com" for User-Name =
"usera at domain.com"
    rlm_realm: No such realm "domain.com"
++[suffix] returns noop
+- entering group accounting
++[acct_unique] returns noop

Is it good idea to add next to proxy.conf or I do not need to do that ?

realm LOCAL {     
accthost	= LOCAL                                                                                                                  
}                                                                                                                                   
realm NULL {                
accthost	= LOCAL                                                                                                       
}                                                                                                                                  

realm DEFAULT {         
accthost	= LOCAL                                                                                                           
}                                      

I case if it's good then should I define “=LOCAL” somewhere ? I mean why
”accthost = LOCAL” is correct and ”accthost = LOCALXXX”  not ?

Thanx.
-- 
View this message in context: http://www.nabble.com/Problem-with-proxy-radius-function-tp16610498p16610498.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.





More information about the Freeradius-Users mailing list