Alan, Ivan, and others could help me
I reinstalled Debian system and installed new version 2.1.7. Allway the same problem.
I think i miss something very basic for you but not for the freeradius beginner I am.
That is all what I did :
install last stable debapt-get update
apt-get upgrade
apt-get install openssh-server
apt-get install libcurl4-openssl-dev
apt-get install tcpdump
apt-get gcc
apt-get make
wget -c ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.1.7.tar.gz
tar xvzf freeradius-server-2.1.7.tar.gz
cd freeradius-server-2.1.7
./configure;make;make install
add AP1 in clients.conf :
client 192.168.0.250 {
secret = lrnp2tlm
shortname = AP1
}
add home_server in proxy.conf :
home_server IAS {
ipaddr = 192.168.0.252
port = 1812
type = "auth"
secret = "lrnp2tlm"
response_window = 20
max_outstanding = 65536
require_message_authenticator = no
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_interval = 30
num_answers_to_alive = 3
num_pings_to_alive = 3
revive_interval = 120
status_check_timeout = 4
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
home_server_pool jack_pool {
type = fail-over
home_server = IAS
}
realm jack {
auth_pool = jack_pool
}
modify eap.conf :
default_eap_type = mschapv2
and in peap function :
peap {
default_eap_type = mschapv2
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = no
virtual_server = "proxy-inner-tunnel"
}
mschapv2 {
}
I remove inner-tunnel link in raddb/sites-enabled
Create one for proxy-sites-enabled
debian:/usr/local/etc/raddb/sites-enabled# ls -l
total 0
lrwxrwxrwx 1 root staff 33 oct 3 20:51 control-socket -> ../sites-available/control-socket
lrwxrwxrwx 1 root staff 26 oct 3 20:51 default -> ../sites-available/default
lrwxrwxrwx 1 root staff 37 oct 3 21:00 proxy-inner-tunnel -> ../sites-available/proxy-inner-tunnel
comment suffix twice in default file
add jack in proxy-inner-tunnel:
server proxy-inner-tunnel {
authorize {
update control {
Proxy-To-Realm := "jack"
}
}
authenticate {
eap
}
post-proxy {
eap
}
}
That's all. Is something wrong or missing ?
Thanks
> Alan,Something is badly broken in your installation. You should remove both
>
> I installed first with apt-get an older version, then remove
> /etc/freeradius
> and /etc/raddb and then install the new version 2.1.7 from freeradius.org.
>
> Jacques
>
> 2009/10/3 Alan DeKok <aland@deployingradius.com>
>
>> Jacques FOUCHER wrote:
>> > but Alan told me too proxying is not made
>> > PEAP: Remembering to do EAP-MS-CHAP-V2 post-proxy.
>> > [eap] Tunneled session will be proxied. Not doing EAP.
>> > ++[eap] returns handled
>> > WARNING: Empty section. Using default return values.
>> > ERROR: Failed to create a new socket for proxying requests.
>> > ERROR: Failed inserting request into proxy hash.
>> > ERROR: Failed to proxy request 8
>> >
>> > Sorry Alan , i don't have any idea.
>>
>> Are you sure you're using 2.1.7, and not some other version?
>>
>> It's a little hard to believe that proxying doesn't work in 2.1.7. It
>> seems to be fine for everyone else...
versions completely and then do fresh 2.1.7 install.
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html