it's true! i had configure my FreeRADIUS server as a client on the IAS box, but my server freeradius which i need it toi be server proxy don't transmit the request of my switch. when i learned freeradius, i begun it by configurate it with users file, and after with MySQL database. then i want to configure it to proxy server which can retransmit request to IAS on windows server 2003. i don't want my freeradius do authentication, i want it proxy server. i have find some informations on that not be true. for the commande radiusd -X he wrote ready to process requests, and when i do my test my freeradius reject the packets. i need configurations files(radiusd.conf, proxy.conf, clients.conf ...) to tranformate it at proxy server. i use freeradius with eap-MD5, Switch cysco catalyst 2950, and windows server 2003. thanks for your help!
From: Stefan Winter <stefan.winter@restena.lu> Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: how to configure Date: Thu, 19 Apr 2007 10:54:38 +0200
i need to configure my freeradius server in proxy server to use it with windows IAS! i want the configuration of the files of freeradius which can permit me to do that!
We all want lots of things. Asking a bit more polite might help.
my last coonfiguration of these files is:
radiusd.conf proxy_request = yes
proxy.conf realm gie.local { type = radius authhost = LOCAL accthost = LOCAL }
realm DEFAULT { type = radius authhost = araignee.gie.local:1812 accthost = araignee.gie.local:1813 secret = parfait nostrip }
Clients.conf client 192.168.0.2 { secret = parfait shortname = araignee.gie.local }
This snippet of config looks good, under the assumption that araignee.gie.local is resolvable on your DNS server and resolves to IP 192.168.0.2.
Now, configure your FreeRADIUS server as a client on the IAS box so that IAS accepts the proxied requests, and, if appliable open the required firewall ports.
BTW: do you actually have a _problem_? Nothing in your mail tells us where things don't work. The general, several-years-old and well-documented rule here is: post the debug output of radiusd -X if you hae a problem. It will help people here figure out the problem.
Stefan
-- Stefan WINTER
Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung
6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
<< attach4 >>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________ Windows Live Spaces : créez votre blog à votre image ! http://www.windowslive.fr/spaces