Thanks to everyone for the pointers. I'm just wondering, but is there an issue for my local "concordia.ca" realm because sometimes it's local and sometimes it is coming from Eduroam? I've seen many configs where realms are given secrets, which seems somewhat strange to me because I imagined that a secret would be part of a client configuration and not necessarily a realm? -- Nathan Van Fleet
-----Original Message----- From: freeradius-users- bounces+nmcdavit=alcor.concordia.ca@lists.freeradius.org [mailto:freeradius-users- bounces+nmcdavit=alcor.concordia.ca@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, February 18, 2011 4:09 AM To: FreeRadius users mailing list Subject: Re: Eduroam with a Local Radius Config?
Nathan McDavit-Van Fleet wrote:
I won’t show the pool config for the “DEFAULT” realm. But suffice to say that’s working. Also, our legacy users who are authenticating with no realm are working as well. What isn’t working are local connections using our local real (user@concordia.ca) and distant AAA requests from Eduroam. The Eduroam cookbook provides some configs that appear to be helpful. But unfortunately they’re so broken I can’t even put them in my configuration.
You can define concordia.ca as a LOCAL realm.
realm concordia.ca { }
That means it won't get proxied.
The rest of the realms look OK. You shouldn't need much in the way of complex "if" statements. Once you define the realms correctly, it should work:
* concordia.ca -> local * no realm -> local * default -> eduroam proxying
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html