On Thu, Aug 04, 2016 at 10:36:07AM +0300, Ali Orhun Akkirman wrote:
When I turn on the proxy configuration, Freeradius can't send reply message"Access-Accept". It sent only "Access-Request" package. I want Freeradius sent reply message to another IP adress.
Yes, of course. FreeRADIUS talks back to the RADIUS client that talked to it, not some other random address. On Thu, Aug 04, 2016 at 10:56:05AM +0300, Ali Orhun Akkirman wrote:
I want to configure SSO integration.
Read the first paragraph of that again. Your NAS should apparently be configured to use your FreeRADIUS server for authentication, but your firewall for accounting. Or just proxy the accounting packets through to the firewall, I guess. Which would give you more flexibility in what's sent to the firewall. But trying to send reply packets back to somewhere the request didn't come from is just plain wrong. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>