Radius proxy - kind of

Alan DeKok aland at deployingradius.com
Tue Sep 28 13:07:31 CEST 2010


Matija Levec wrote:
> I still can't find solution to my problem in documentation so I'll rephrase the question.
> 
> Is it possible to proxy requests in a way analogous to  bogus example below?
> 
> realm example.com {
> 	auth_pool = pool1 {
> 		reject = 1
> 		ok = return
> 	}
> 	auth_pool = pool2 {
> 		reject = 1
> 		ok = return
> 	}
> }  # Authentication fails only if both pools return reject.

  No.  An Access-Reject is treated as a reject.  Failover *never* occurs
on a reject.

> I know documentation says "... It proxies packets ONLY when it receives a packet or a re-transmission from the NAS. If the NAS never re-transmits, the proxy never re-transmits, either."
> 
> Can someone at least suggest in what direction to look for solution?

  Source code patches.

  Alan DeKok.



More information about the Freeradius-Users mailing list