hi, post-proxy etc statements live in virtual servers - that kind of stuff would normally live in your virtual server section - I'm guessing your 2.x config may have just been lifted from an even older 1.x config or such with loads of INCLUDE things rather than taking the standard layout/config. alan On Wed, 28 Nov 2018 at 17:22, MDS Test <mdstest.99999@gmail.com> wrote:
Hi folks,
We have freeradius running on version 2.2.6 running on CentOS6 for a few years now. Now we need to build a need a new host on CentOS7. I installed version 3.0.4 from repo. As I copied my proxy.conf file from the old host. I encounter an error and couldn't figure out what is wrong.
$radiusd -X 2>&1 | tee debugfile radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu, built on Mar 5 2015 at 23:41:36 Copyright (C) 1999-2014 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/raddb/dictionary including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf /etc/raddb/proxy.conf[103]: Invalid location for 'if' Errors reading or parsing /etc/raddb/radiusd.conf
proxy.conf
post-proxy { update proxy-reply { Filter-Id !* "" Fortinet-Access-Profile !* "" Juniper-Local-User-Name !* "" Cisco-AVPair !* "" # Raritan-VSA-Placeholder !* "" PaloAlto-Admin-Role !* "" PaloAlto-Panorama-Admin-Role !* "" F5-LTM-User-Info-1 !* "" }
if("%{proxy-reply:Packet-Type}" == Access-Accept) { perl update proxy-reply { Reply-Message := "Welcome user!" } } }
Please pardon me for maybe this is a simple error but I am new to freeradius and have read doc but couldn't figure it out.
Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html