On Tue, 2021-02-16 at 09:02 -0500, Alan DeKok wrote:
On Feb 16, 2021, at 8:38 AM, Michael Fischer <michael@webfischer.at> wrote:
My goal is to authenticate WiFi-Users via FreeRadius with an eDirectory backend. FreeRadius should then send an accounting packet to a FortiGate firewall where a SSO agent is running.
The server doesn't really originate accounting packets.
The authentication part is working find, a user can connect to the WiFi.
As far as I understood it, I should configure FreeRadius to write a detail file which is then parsed an an accounting package sent to the Fortigate firewall.
Well... maybe. But you can't write an Access-Accept packet, and have it magically turn into an Accounting-Request packet. Thank you very much - that was the hint that lead me to the solution!
I enabled "Radius Accounting" on my WiFi Controller. Now the proxying to the Fortigate Firewall works fine! Thanks a lot, Mike