deployingradius and send Accounting to a nother server

Linux Threads linuxthreads at gmail.com
Wed Sep 30 14:31:52 CEST 2020


Hi Guys,

I am still not winning,

for replication: the home server, home server pool and the realm are
configured in proxy.conf

replicate should be listed in sites-enabled/"site" either under the
below sections depending on requirements I am using accounting:

authorize
accounting
preacct
pre-proxy
recv-coa

and control I have listed it under accounting:

       update control {
        &Replicate-to-Realm := "REALM-NAME"
    }

do I leave mods-enabled/replicate as is?

replicate {
}

if a user auths with username or nt-domain\username, it does not
replicate,

the only time it send packets to home server is when I use:

echo Message-Authenticator=0x00|radclient 127.0.0.1 acct testing123
Received response ID 21, code 5, length = 20

replicate is loaded:

Wed Sep 30 09:02:45 2020 : Debug: Loaded rlm_replicate, checking if
it's valid
Wed Sep 30 09:02:45 2020 : Debug:   # Loaded module rlm_replicate
Wed Sep 30 09:02:45 2020 : Debug:   # Loading module "replicate" from
file /etc/freeradius/3.0/mods-enabled/replicate
Wed Sep 30 09:02:45 2020 : Debug: Loaded rlm_realm, checking if it's
valid

I have no otherway of testing this exept if I auth against the AP

Thanks in advance

On Mon, 2020-09-28 at 08:55 -0400, Alan DeKok wrote:
> > the replicate module says that it works the same way as proxy
> 
>   No, it doesn't.  The documentation explicitly says that it's not
> the same as proxying.  It's similar, but not "the same".
>>>
> > > Do you have a *specific* question about how to do it, or about
> > > the
> > > documentation?
> > 
> > the user only authenticate with the nt-domain username, how is this
> > tied to a realm?
> 
>   via the Replicate-To-Realm attribute... as the documentation says.
> 
>   The documentation says how to use the "replicate" module.  If you
> try to do anything else, it won't work.
> 
> > Mon Sep 28 09:46:43 2020 : Debug:  # Loading accounting {...}
> > Mon Sep 28 09:46:43 2020 : Debug:   replicate
> > Mon Sep 28 09:46:43 2020 : Debug:   update {
> > Mon Sep 28 09:46:43 2020 : Debug:    &control:Replicate-To-Realm :=
> > "CLIENT-ACCT-REALM"
> > 
> > 
> > replicate config file:
> > replicate {
> > 
> > home_server CLIENT-ACCT-SERVER { 
> 
>   No, you can't invent configuration and expect it to work.
> 
>   You can't put "home_server" into the configuration for the
> replicate module.
> 
>   Read the debug output... it will show you that it is NOT loading
> the "CLIENT-ACCT-SERVER" configuration.
> 
>   Realms and home_servers go into proxy.conf.
> 
>   Alan DeKok.
> 



More information about the Freeradius-Users mailing list