Hello, How can I transform freeradius server in a proxy? I configured the proxy.conf, but seems dont work proxy.conf: proxy server { synchronous = no retry_delay = 5 retry_count = 3 dead_time = 120 default_fallback = yes post_proxy_authorize = no } realm DEFAULT { type = radius authhost = mydomain.br accthost = mydomain.br secret = mysecret nostrip } And I uncommnet the line in radiusd.conf: proxy_requests = yes $INCLUDE ${confdir}/proxy.conf I wanna do this: |Openser| -> |Radiusclient| -> |Freeradius| -> |IAS| -> |AD| Its work? And in IAS should I configured anything? Sorry for the portuguese e-mail. freeradius-users-request@lists.freeradius.org escreveu: Hello! This list is in English.
Como faço para transformar o Freeradius num cliente do IAS? Existe algum tutorial, ou artigo? Se for sem passar pelo servidor freeradius eu já configurei o radiusclient para ir direto ao IAS, mas não deu certo, nada acontece, e o pior de tudo que não tenho nem como debugar o problema e o arquivo de log do IAS é muito fraco.
|Openser| -> |Radiusclient| -> |Freeradius| -> |IAS| -> |AD|
Da pra fazer isso? Como faço isso?
Alguma idéia?
If I got you right, all you want to do is use FreeRADIUS as a proxy to communicate to an IAS which does the authentication. This is easy, all you need to do is proxy all incoming requests to the IAS. See proxy.conf, read it, try it, and if doesn't work for you ask here again. But in English please, it's been quite a time since I had Spanish in school. Greetings, Stefan Winter -- Stefan WINTER RESTENA Foundation - Réseau Téléinformatique de l'Education Nationale et de la Recherche R&D Engineer 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Hi,
How can I transform freeradius server in a proxy? I configured the proxy.conf, but seems dont work
And I uncommnet the line in radiusd.conf:
proxy_requests = yes $INCLUDE ${confdir}/proxy.conf
I wanna do this: |Openser| -> |Radiusclient| -> |Freeradius| -> |IAS| -> |AD|
Its work?
And in IAS should I configured anything?
Configure the NULL realm with the same settings as DEFAULT. Other than that, the config sounds good to me. Did you change anything apart from that in the default config file? In particular, you need to have at least one instance of the "realm" module in authorize { }. The default config has "suffix" in there, that should be fine. You need to be sure then that your user names don't contain the @ character - otherwise they won't match the DEFAULT realm you set up in proxy.conf. If you are positive that an instance of realm is in authorize and NULL is configured, but it still doesn't work then please post the debug output (radiusd -X) of a packet that arrived and was supposed to be proxied, but wasn't.
Sorry for the portuguese e-mail.
When I read it, I wondered what strange dialect of Spanish this is. :-) Portuguese and Spanish aren't that far apart after all, it seems. Greetings, Stefan Winter -- Stefan WINTER RESTENA Foundation - Réseau Téléinformatique de l'Education Nationale et de la Recherche R&D Engineer 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
participants (2)
-
Artur Hayne -
Stefan Winter