Hi Alan Dekok or anyone,
I haven’t got a reply on this one
yet… I was able to do it before but not anymore… I’m really
curious to know why…
Thank you!
Difan
From:
freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradius.org
[mailto:freeradius-users-bounces+difan.zhao=guest-tek.com@lists.freeradius.org]
On Behalf Of
Sent: March-02-11 9:01 AM
To:
Subject: Use Hint file to proxy
Hi experts,
Long time no talk!
I have another dilemma. For some reasons I want to try to
use the hints file to do Proxy (the normal way of configuring realm and
proxy.conf file works). So the following is my config:
=============== hints ===================
DEFAULT User-Name =~ "^host\/.*\.gtcorp\.com$"
Hint = "Marriott"
=============== users ===================
DEFAULT Hint == "Marriott",
Proxy-To-Realm := "~\.gtcorp\.com$"
=============== proxy.conf ===================
….
realm "~\.gtcorp\.com$" {
nostrip
auth_pool = Marriott_Auth_Pool
acct_pool = Marriott_Acct_Pool
}
============== module/realm ================
realm Marriott {
format = suffix
delimiter = "/"
}
Then I commented out the “Marriott” realm in the
“authorize” section in the default server so the settings in the
“realm” file shouldn’t do anything.
============= sites-available/default ==============
authorize {
…
#
Marriott
…
}
In the radius –X log I do see the requests are sent to
the proxy server but I also see the following abnormal logs. The complete log
is also attached.
[eap] No pre-existing handler found
…
rlm_eap: No EAP session matching the State
variable.
[eap] Either EAP-request timed out OR
EAP-response to an unknown EAP-request
[eap] Failed in handler
++[eap] returns invalid
Failed to authenticate the user.
So is it possible to use the hints file to do proxy or
I’m totally out of my mind?? If it’s possible where I could do
wrong?
Thanks a lot!
T: 403-509-1010 ext
3048 | M: 403-689-7514 |
F: 403.509.1011
difan.zhao@guest-tek.com | www.guest-tek.com
The contents of this email are
confidential and intended for the recipient only. If you have received this
email in error, please notify us, and destroy all copies.