Hello List, I have a problem with radrelay and specifically the IPASS Realm. Attached is the dump of the freeradius -X run. This is the scenario: I have a server that is radrelaying packets to another server. But for some reason - specifically only the RADIUS realm - it tries to proxy the accounting request. I do not want it to attempt to proxy the accounting request to the IPASS server when it is radrelaying, as it should only store the packet details into sql. Can anyone perhaps give me an idea how to work around this issue. Kind Regards, Etienne Pretorius
Hello List, [IPASS] Looking up realm "IPASS" for User-Name = "IPASS/*USERNAME*" [IPASS] Found realm "IPASS" [IPASS] Adding Realm = "IPASS" [IPASS] Proxying request from user *USERNAME* to realm IPASS [IPASS] Preparing to proxy accounting request to realm "IPASS" There is no packet that leaves this server (tcpdump agrees), which is correct since it is a radrelayed packet. The server that radrelayed the request never receives a response from the server whose freeradius -X dump is attached in the previous email. Kind Regards, Etienne Pretorius
Hello List, When I change the REALM to the following: realm IPASS { nostrip # pool = IPASS Proxy-To-Realm := LOCAL } It works, but now this server can not authenticate for IPASS. So I am sure that something is wrong with radrelaying to a realm that needs to acct off another server... Kind Regards, Etienne Pretorius
Etienne Pretorius wrote:
When I change the REALM to the following:
realm IPASS { nostrip # pool = IPASS Proxy-To-Realm := LOCAL }
It won't work. You can't put "proxy-To-Realm" there.
It works, but now this server can not authenticate for IPASS.
So I am sure that something is wrong with radrelaying to a realm that needs to acct off another server...
Read the debug log. Alan DeKok.
Hello Alan,
Etienne Pretorius wrote:
When I change the REALM to the following:
realm IPASS { nostrip # pool = IPASS Proxy-To-Realm := LOCAL }
It won't work. You can't put "proxy-To-Realm" there.
It was only to demonstrate that when I have the pool active then the radelayed accounting packet does not return success.
It works, but now this server can not authenticate for IPASS.
So I am sure that something is wrong with radrelaying to a realm that needs to acct off another server...
Read the debug log.
AS Per the debug log: } # server UPSTREAMPROVIDER Going to the next request <<< Received proxied response code 0 from internal virtual server. WARNING: Empty post-proxy section. Using default return values. Finished request 2. Because it is returning response code of 5 now ( without an active pool ). Where specifically have I missed something in the debug log? Kind Regards, Etienne Pretorius
participants (2)
-
Alan DeKok -
Etienne Pretorius