1.1.7 to 2.0.2 config for Realms problem

5 Jun 2008

      I have a problem with a realm configuration that used to work with FR 1.1.7, but does not work at all with 2.0.2 and virtual servers.

I have a virtual server defined in sites-available/janet-roaming thus:

server jrsradius {
        listen {
                ipaddr = jrsradius2.liv.ac.uk
                port = 0
                type = auth
        }
        listen {
                ipaddr = jrsradius2.liv.ac.uk
                port = 0
                type = acct
        }
        proxy_requests  = yes

        $INCLUDE jrs-proxy.conf

        $INCLUDE jrs-clients.conf

        authorize {
                preprocess
                chap
                mschap
                suffix
                eap {
                        ok = return
                }
                unix
                files
                ldap
                expiration
                logintime
                pap
        }

        authenticate {
                Auth-Type PAP {
                        pap
                }
                Auth-Type CHAP {
                        chap
                }
                Auth-Type MS-CHAP {
                        mschap
                }
                unix
                Auth-Type LDAP {
                        ldap
                }
                eap
        }

	 ... some stuff removed for brevity!
}

jrs-proxy.conf contains:

proxy server {
        default_fallback = no
        post_proxy_authorize = no
}

home_server localhost {
        type = auth
        ipaddr = 127.0.0.1
        port = 1812
        secret = testing123
        response_window = 20
        zombie_period = 40
        revive_interval = 120
        status_check = status-server
        check_interval = 30
        num_answers_to_alive = 3
}

realm LOCAL {
        #  If we do not specify a server pool, the realm is LOCAL, and
        #  requests are not proxied to it.
        type            = radius
        authhost        = LOCAL
        accthost        = LOCAL
}

realm NULL {
        type            = radius
        authhost        = LOCAL
        accthost        = LOCAL
}

realm liv.ac.uk {
        type            = radius
        authhost        = LOCAL
        accthost        = LOCAL
}

realm liverpool.ac.uk {
        type            = radius
        authhost        = LOCAL
        accthost        = LOCAL
}

(stuff for JENET NRPS servers removed)

But logging in as testuser@liverpool.ac.uk I get:

Thu Jun  5 11:57:21 2008 : Debug:     rlm_realm: Looking up realm "liverpool.ac.uk" for User-Name = "testuser@liverpool.ac.uk"
Thu Jun  5 11:57:21 2008 : Debug:     rlm_realm: No such realm "liverpool.ac.uk"

What have I done wrong in defining the realms for liv.ac.uk and liverpool.ac.uk?
Wrong place? Wrong syntax?

They are not mentioned during server startup with "-X and -xx" beyond:

Thu Jun  5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/sites-enabled/janet-roaming
Thu Jun  5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/jrs-proxy.conf

so is the config being ignored because it is wrong?

Thanks.

---------------
Barry Dean
Networks Team
Computing Services Department
Tel: 0151 794 5641 (x45641)

1.1.7 to 2.0.2 config for Realms problem

Dean, Barry