Re: problem with proxy configuration
Hi Alan, Thanks for the response.
It looks like you've configured the server to proxy to itself. Why?
I do understand your technical objection of doing what I am doing, but I have a valid application reson, which is that I support multiple realms on this particular radius server. For some realms, I want the UserName to strip the Realm name ("nostrip") and for some I don't.... Is there any other way to achieve the same than not using "striop" and "nostrip" flag in proxy.conf Thanks again for your comments. Prabh -- MyBlog: http://things-on-my-mind.blogspot.com/ Get your news at www.DailyHeadlines.NET
Prabhdeep Singh wrote:
I do understand your technical objection of doing what I am doing, but I have a valid application reson, which is that I support multiple realms on this particular radius server. For some realms, I want the UserName to strip the Realm name ("nostrip") and for some I don't....
Is there any other way to achieve the same than not using "striop" and "nostrip" flag in proxy.conf
Read before you edit. From my default proxy.conf file: # # This is a local realm. The requests are NOT proxied, # but instead are authenticated by the RADIUS server itself. # # You don't need a secret if BOTH 'authhost' and 'accthost' are # set to LOCAL. # #realm bla.com { # type = radius # authhost = LOCAL # accthost = LOCAL #} "LOCAL" is a special word and does not equal localhost or your fqdn. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
On a side note... if you don't want to use CVS to track config changes as Alan suggests, you should at least make a backup copy of the original configs that shipped with the tarball (with all their handy inline documentation) to refer to when you get stuck. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
"Prabhdeep Singh" <prabhdeep@gmail.com> wrote:
I do understand your technical objection of doing what I am doing, but I have a valid application reson, which is that I support multiple realms on this particular radius server.
Nonsense. Do you think no one else supports multiple realms in one RADIUS server? As I said before, configuring a server to proxy requests to itself is wrong and broken. Don't do it. Stop arguing. It's not a valid configuration. It won't work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan DeKok -
Dennis Skinner -
Prabhdeep Singh