Hi Alan, I have set it up Freeradius as proxy with JRadius plugin. I'm using JRadius to modify the Access_Accept packets. With my setup I'm able to receive the radius packets through JRadius plugin during post-auth. In JRadius I have a handler to modify the Access_Accept and it is working fine. Now I need a help in setting up various sets of Radius servers in proxy.conf based on some VSA value in Access_Request. The requirement is to redirect the requests to appropriate Radius servers based on the VSA value. What I can understand from the proxy.conf is to define various home_servers and home_server pool linked to a realm. Now I'm not sure how to link the VSA value in Access_Request to these home_servers. Could you please provide some example to achieve my above requirement. Thanks, Ila. On Fri, Mar 21, 2014 at 5:53 AM, Alan DeKok <aland@deployingradius.com>wrote:
Ilavajuthy Palanisamy wrote:
I'm new to Freeradius. I would like to get some pointers and documentation details about setting up Freeradius as proxy.
raddb/proxy.conf.
Our requirement is to have a Radius proxy and modify the Access Accept response based on certain criteria.
raddb/sites-available/default. Look for the "post-proxy" section.
Few questions regarding Freeradius proxy support. Does Freeradius proxy has support for a plugin probably in Java to snoop the Radius request calls?
No. If you want to snoop on radius packets, use pcap. If you want to look at what the server is doing, use "radiusd -X". If you want to modify the servers behavior, use "unlang".
Does Freeradius proxy setup has option to specify which Radius server to pickup based on some attribute value in Access Request?
Yes. See raddb/proxy.conf
Our requirement is to have multiple Radius Servers for certain groups. This group information will be available in one of the VSA in Access Request.
That will work.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html