Use Hint file to proxy

2 Mar 2011

      Hi experts,

Long time no talk!

I have another dilemma. For some reasons I want to try to use the hints file to do Proxy (the normal way of configuring realm and proxy.conf file works). So the following is my config:

=============== hints ===================
DEFAULT User-Name =~ "^host\/.*\.gtcorp\.com$"
        Hint = "Marriott"

=============== users ===================
DEFAULT Hint == "Marriott", Proxy-To-Realm := "~\.gtcorp\.com$"

=============== proxy.conf ===================
....
realm "~\.gtcorp\.com$" {
        nostrip
        auth_pool = Marriott_Auth_Pool
        acct_pool = Marriott_Acct_Pool
}

============== module/realm ================
realm Marriott {
        format = suffix
        delimiter = "/"
}

Then I commented out the "Marriott" realm in the "authorize" section in the default server so the settings in the "realm" file shouldn't do anything.

============= sites-available/default ==============
authorize {
...
#       Marriott
...
}

In the radius -X log I do see the requests are sent to the proxy server but I also see the following abnormal logs. The complete log is also attached.

[eap] No pre-existing handler found
...
rlm_eap: No EAP session matching the State variable.
[eap] Either EAP-request timed out OR EAP-response to an unknown EAP-request
[eap] Failed in handler
++[eap] returns invalid
Failed to authenticate the user.

So is it possible to use the hints file to do proxy or I'm totally out of my mind?? If it's possible where I could do wrong?

Thanks a lot!

[cid:image002.gif@01CBD8B8.490E09F0]Difan Zhao M.Eng | CCNA CCNP CCSP | Network Engineer
T: 403-509-1010 ext 3048 | M: 403-689-7514 | F: 403.509.1011
difan.zhao@guest-tek.com<mailto:difan.zhao@guest-tek.com> | www.guest-tek.com<http://www.guest-tek.com>

The contents of this email are confidential and intended for the recipient only. If you have received this email in error, please notify us, and destroy all copies.