Tomas Hoger wrote:
Hi Federico!
Check default radiusd.conf and search for "realm" and "suffix". It looks like you're not calling rlm_realm in authorize.
Yes, that was the problem! I thought that the realms were handled by some kind of internal magic... Thanks.
We have a working FreeRADIUS 1.1.4 running since a lot of months. Now we have to proxy the requests for a realm (gtenet.it) to a given RADIUS server, but our server seems to ignore the proxy configuration!
I have set "proxy_requests = yes" and included the "proxy.conf" file (I'm sure of these, looked at the debug output).
Here it is our "proxy.conf" file:
proxy server { synchronous = no retry_delay = 5 retry_count = 3 dead_time = 120 default_fallback = yes post_proxy_authorize = no } realm gtenet.it { type = radius authhost = 195.103.212.53:1645 accthost = 195.103.212.53:1646 secret = XXXXXXXXX }
When a request for xxxx@gtenet.it is received, it goes through the authorization and then instead of being proxied it goes through authentication and obviously fail!
Here it is the output of the server in debug mode:
Jul 10 18:55:29 aragorn radiusd[23262]: Going to the next request Jul 10 18:55:29 aragorn radiusd[23262]: Waking up in 6 seconds... Jul 10 18:55:29 aragorn radiusd[23262]: rad_lowerpair: User-Name now 'neomedia@gtenet.it' Jul 10 18:55:29 aragorn radiusd[23262]: rad_lowerpair: User-Password now 'XXXXXXXX' Jul 10 18:55:29 aragorn radiusd[23262]: rad_rmspace_pair: User-Name now 'neomedia@gtenet.it' Jul 10 18:55:29 aragorn radiusd[23262]: rad_rmspace_pair: User-Password now 'XXXXXXXX' Jul 10 18:55:29 aragorn radiusd[23262]: Processing the authorize section of radiusd.conf Jul 10 18:55:29 aragorn radiusd[23262]: modcall: entering group authorize for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: modcall[authorize]: module "preprocess" returns ok for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: modcall[authorize]: module "nm" returns noop for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: modcall[authorize]: module "chap" returns noop for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: modcall[authorize]: module "mschap" returns noop for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. Jul 10 18:55:29 aragorn radiusd[23262]: modcall[authorize]: module "pap" returns noop for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: modcall: leaving group authorize (returns ok) for request 72 Jul 10 18:55:29 aragorn radiusd[23262]: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Jul 10 18:55:29 aragorn radiusd[23262]: auth: Failed to validate the user.
Any hints of what could be the problem?
On 7/11/07, Federico Giannici <giannici@neomedia.it> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- ___________________________________________________ __ |- giannici@neomedia.it |ederico Giannici http://www.neomedia.it ___________________________________________________