Hi I am trying to set up the radius server so that it forwards all accounting packet to a remote radius server without having to wait for reply. I set it up using the copy-acct-to-home-server, proxy.conf and detail files in the modules directory. I've got one problem however, whenever the remote radius server becomes unavailable and then comes back up, my radius server stop forwarding and never marks it as alive again. At this point the remote server is marked as zombie, and remains marked as zombie indefinitely, even when it becomes reachable. I am using FreeRadius 2.1.7 with the following parameters for the home server in the proxy.conf file: response_window = 8 zombie_period = 40 revive_interval = 120 status_check = none With these parameters I'm understanding that if the local radius server doesn't receive an accounting response from the remote server before 8 seconds then it will mark it as a zombie, after a further 40 seconds it should mark it as dead. Then after 120 seconds it should mark it alive again, however I never see it being marked as alive again. Is there something I'm doing wrong? Or an alternate option? Thanks and regards, Andrew ------------------------------------------------------------------------------------- Vodafone ------------------------------------------------------------------------------------- This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. Save the environment for our children - Print e-mail only when necessary.
Thanks. Andrew -----Original Message----- From: freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freeradius.org [mailto:freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freerad ius.org] On Behalf Of Alan DeKok Sent: Tuesday, August 02, 2011 1:53 PM To: FreeRadius users mailing list Subject: Re: Forwarding Accounting Packets Tonna, Andrew, VF-MT wrote:
I am trying to set up the radius server so that it forwards all accounting packet to a remote radius server without having to wait for reply.
Use version 2.1.11 (or git v2.1.x branch), and see src/modules/replicate Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------------------- Vodafone ------------------------------------------------------------------------------------- This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. Save the environment for our children - Print e-mail only when necessary.
Hi Alan, I installed freeradius 2.1.11 as you suggested and tried to use the replicate module. It seems that it is not working for me, maybe I am not configuring it properly... In the replicate module I have the following: replicate { update control { Replicate-To-Realm := AL_realm } } And in the accounting section in the 'default' file I have 'replicate' entered. Is there something I'm doing wrong? The proxy.conf file seems fine since, Proxy-To-Realm works just fine. Thanks and regards, Andrew -----Original Message----- From: freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freeradius.org [mailto:freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freerad ius.org] On Behalf Of Alan DeKok Sent: Tuesday, August 02, 2011 1:53 PM To: FreeRadius users mailing list Subject: Re: Forwarding Accounting Packets Tonna, Andrew, VF-MT wrote:
I am trying to set up the radius server so that it forwards all accounting packet to a remote radius server without having to wait for reply.
Use version 2.1.11 (or git v2.1.x branch), and see src/modules/replicate Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------------------- Vodafone ------------------------------------------------------------------------------------- This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. Save the environment for our children - Print e-mail only when necessary.
Um... why are you... nevermind. Ok so you need to set the realm you want to replicate to then call 'replicate'. Something like: preacct { update control { Replicate-To-Realm := 'AL_realm' } } accounting { replicate } I've tested this very recently on 3.x (master) and it works fine. -Arran On 4 Aug 2011, at 12:05, Tonna, Andrew, VF-MT wrote:
Hi Alan,
I installed freeradius 2.1.11 as you suggested and tried to use the replicate module.
It seems that it is not working for me, maybe I am not configuring it properly...
In the replicate module I have the following:
replicate {
update control { Replicate-To-Realm := AL_realm }
}
And in the accounting section in the 'default' file I have 'replicate' entered.
Is there something I'm doing wrong?
The proxy.conf file seems fine since, Proxy-To-Realm works just fine.
Thanks and regards,
Andrew
-----Original Message----- From: freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freeradius.org [mailto:freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freerad ius.org] On Behalf Of Alan DeKok Sent: Tuesday, August 02, 2011 1:53 PM To: FreeRadius users mailing list Subject: Re: Forwarding Accounting Packets
Tonna, Andrew, VF-MT wrote:
I am trying to set up the radius server so that it forwards all accounting packet to a remote radius server without having to wait for reply.
Use version 2.1.11 (or git v2.1.x branch), and see src/modules/replicate
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------------------- Vodafone -------------------------------------------------------------------------------------
This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission.
Save the environment for our children - Print e-mail only when necessary.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
On Thu, Aug 4, 2011 at 5:18 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
Um... why are you... nevermind.
Ok so you need to set the realm you want to replicate to then call 'replicate'.
Something like:
preacct { update control { Replicate-To-Realm := 'AL_realm' } }
accounting { replicate }
... and in case it's not obvious already, do NOT edit raddb/modules/replicate. The changes should be in raddb/sites-available/default (or whatever file your virtual server is on). Also, since 2.1.11 is known to have some bugs, better upgrade to latest v2.1.x snapshot from git. -- Fajar
Thanks Fajar, it's working fine now. Andrew -----Original Message----- From: freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freeradius.org [mailto:freeradius-users-bounces+andrew.tonna=vodafone.com@lists.freeradius.org] On Behalf Of Fajar A. Nugraha Sent: Thursday, August 04, 2011 1:28 PM To: FreeRadius users mailing list Subject: Re: Forwarding Accounting Packets On Thu, Aug 4, 2011 at 5:18 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
Um... why are you... nevermind.
Ok so you need to set the realm you want to replicate to then call 'replicate'.
Something like:
preacct { update control { Replicate-To-Realm := 'AL_realm' } }
accounting { replicate }
... and in case it's not obvious already, do NOT edit raddb/modules/replicate. The changes should be in raddb/sites-available/default (or whatever file your virtual server is on). Also, since 2.1.11 is known to have some bugs, better upgrade to latest v2.1.x snapshot from git. -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------------------------------------- Vodafone ------------------------------------------------------------------------------------- This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. Save the environment for our children - Print e-mail only when necessary.
Tonna, Andrew, VF-MT wrote:
I installed freeradius 2.1.11 as you suggested and tried to use the replicate module.
It seems that it is not working for me,
See the FAQ for "it doesn't work" Really. Posting the debug output is *infinitely* more useful than saying "it doesn't work" Alan DeKok.
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Fajar A. Nugraha -
Tonna, Andrew, VF-MT