Re: PLS Help I get no response for 2 monthe (missing
Hi Stepan 10x for your prompt respond I Used radrelay and it works fine the point is that I would like to do it without additional proccess Like u said with the hint file where can I get this patch for the hint file ? And how do I tell him not to look for User-Name 10x in adv Tal assa To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. PLS Help I get no response for 2 monthe (missing User-name attribute) (Assa Tal) 2. Re: PLS Help I get no response for 2 monthe (missing User-nameattribute) (Stefan Winter) 3. cisco ap350(WLAN) vs freeradius with PEAP (Gabor Szelei) 4. Re: Special characters in users file (sumi thra) 5. Re: FreeRadius + MySQL & Encrypted passwords (Miguel Angel Quiles) ---------------------------------------------------------------------- Message: 1 Date: Mon, 8 May 2006 09:50:45 +0300 From: "Assa Tal" <Tal.Assa@comverse.com> Subject: PLS Help I get no response for 2 monthe (missing User-name attribute) To: <freeradius-users@lists.freeradius.org> Message-ID: <FE225DCF1021F34FB2269676A45BB8814434AF@il-tlv-mail01.comverse.com> Content-Type: text/plain; charset="us-ascii" Hello All freeradius mailinglist I would appriciate you help Description a telephony service provider is sending Radius req to my RADIUS server who proxy them to a backend server I have configured a free radius server Version 1.1.0 to act as a proxy server to proxy the request to a backend server These are the configuration file clients.conf and the proxy.conf Client.conf client 172.28.185.31/32 { secret=secretgprs1 shortname=RADIUS_GGSN Proxy.conf realm NULL { type = radius authhost=LOCAL accthost=172.31.201.98:1813 (backend server) secret=secretgprs1 } # # This realm is for ALL OTHER requests. # realm DEFAULT { type = radius authhost=LOCAL accthost=172.31.201.98:1813 secret=secretgprs The problem I have noticed that radius request are not proxied at all So I started to dig in and found that freeradius will not proxy accounting If the attribute User -Name is missing As you can see I made some logs and u can see very vividly the problem. I made my own test to emulate the problem with a radius client and as u can see it was proxies The big Q is how to I force the freeradius to pass the request and not to check these header or maybe to use some sort of INJECTION To the header . I Tia Tal assa
Hi,
Hi Stepan 10x for your prompt respond I Used radrelay and it works fine
You're welcome :-)
the point is that I would like to do it without additional proccess Like u said with the hint file
where can I get this patch for the hint file ?
http://bugs.freeradius.org/show_bug.cgi?id=335
And how do I tell him not to look for User-Name
hints usually has lines user Attrib1 == bar Attrib2 := foo Meaning, if a request from 'user' has Attrib1 == bar, then add Attrib2 with content "foo". Pretty much liek the "users" file. And so, analogous to the "users" file, a line like DEFAULT User-Name = "my-dummy-user-name" means: for every user ("DEFAULT") with no further conditions (rest of the line is empty) add a User-Name attribute if none is present (note the = instead of the := ; a := *replaces* User-Name even if it's there already, and you don't want that). In your case you may want to add your realm as attribute value, so that the packet later gets caught by the realm processing. Greetings, Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
participants (2)
-
Assa Tal -
Stefan Winter