Any one got any advice?<br><br><div class="gmail_quote">On Sat, Dec 19, 2009 at 12:46 AM, green green <span dir="ltr"><<a href="mailto:gggreen4@gmail.com">gggreen4@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
i have domain1\user1 and this get radius proxy correctly to the radius1 server (11.11.11.11) based on ntdomain prefix<br>have also set the ignore_null = yes <br><br>i have user1@domain1 and this get radius proxy correctly to the radius1 server (11.11.11.11) based on suffix<br>
have also set the ignore_null = yes <br><br><u><b>under /modules/realm </b></u><br>realm ntdomain {<br> format = prefix<br> delimiter = "\\"<br> ignore_default = yes<br> ignore_null = yes<br>
}<br><br>realm suffix {<br> format = suffix<br> delimiter = "@"<br> ignore_default = yes<br> ignore_null = yes<br>}<br><br><br><u><b>Under proxy.conf</b></u><br><br>realm domain1 {<br>
type = radius <br>
nostrip <br>
authhost = <a href="http://11.11.11.11:1812" target="_blank">11.11.11.11:1812</a><br>
accthost = <a href="http://11.11.11.11:1813" target="_blank">11.11.11.11:1813</a><br>
secret = secret1<br>
}<br>
<br>realm NULL {<br> type = auth<br> authhost = <a href="http://22.22.22.22:1812" target="_blank">22.22.22.22:1812</a><br> accthost = <a href="http://22.22.22.22:1813" target="_blank">22.22.22.22:1813</a><br>
secret = secret1<br>
}<br><br><br><u><b>Debug<br></b></u><br><b>[ntdomain] No '\' in User-Name = "user2", skipping NULL due to config.<br>++[ntdomain] returns noop<br>[suffix] No '@' in User-Name = "user2", skipping NULL due to config.<br>
++[suffix] returns noop</b><br>[eap] No EAP-Message, not doing EAP<br>++[eap] returns noop<br>++[unix] returns notfound<br>++[files] returns noop<br>++[expiration] returns noop<br>++[logintime] returns noop<br>[pap] WARNING! No "known good" password found for the user. Authentication may fail because of this.<br>
++[pap] returns noop<br>No authenticate method (Auth-Type) configuration found for the request: Rejecting the user<br>Failed to authenticate the user.<br>Using Post-Auth-Type Reject<br>+- entering group REJECT {...}<br>[attr_filter.access_reject] expand: %{User-Name} -> user2<br>
attr_filter: Matched entry DEFAULT at line 11<br>++[attr_filter.access_reject] returns updated<br>Delaying reject of request 3 for 1 seconds<br>Going to the next request<br>Waking up in 0.9 seconds.<br>Sending delayed reject for request 3<br>
Sending Access-Reject of id 211 to 3.3.3.3 port 1645<br>Waking up in 1.0 seconds.<br>Cleaning up request 2 ID 210 with timestamp +14<br>Waking up in 3.9 seconds.<br>Cleaning up request 3 ID 211 with timestamp +17<br>Ready to process requests.<br>
<br>i have user2 (without domain) and this get rejected, i want it to send to radius2 server (22.22.22.22) as defined in the NULL domain as defined in the proxy.conf. Can advise how to do this?<br><br><br>
</blockquote></div><br>