HI, I've a few questions about authentication by md5. I have a ldap database where password are encrypted in sha, so according to the following link, i only can do pap: http://deployingradius.com/documents/protocols/compatibility.html But i need to authenticate users with login/pwd (it's necessary), which mean eap md5 or eap ttls/peap. So, it is possible? if not, what can i do? thanks. _________________________________________________________________ Créez votre disque dur virtuel Windows Live SkyDrive, 5Go de stockage gratuit ! http://www.windowslive.fr/skydrive/

...

Is freeradius possible to handle this and what the rules should I write in proxy.conf?

You have to configure the server to log to the "detail" file (or multiple "detail" files), and then read that, and proxy those requests to another server.

How can I confugure the server to read the log file and proxy the requests to another server? Which options exactly should I write in configuration files?

Alan DeKok.

...

How can I confugure the server to read the log file and proxy the requests to another server?

raddb/sites-available/copy-acct-to-home-server

freeradius proxy server has to send all requests to 2 radius servers but proxy server has to modify attributes (by rule in hints file) in requests to 1 server and hasn't to modify attributes in requests to 2 server. Is this possible?

I found example: listen { ... } client one { ... virtual_server = server_one } client two { ... virtual_server = server_two } server server_one { authorize { ... } ... } server server_two { authorize { ... } ... } How can I specify: 1) server_one has to modify and proxy requests to 192.168.0.10:1812 2) server_two has to proxy requests to 192.168.0.11:1812 ? On Wed, Apr 2, 2008 at 6:42 PM, Alan DeKok <aland@deployingradius.com> wrote:

Mikhail Novikov wrote:

...

freeradius proxy server has to send all requests to 2 radius servers but

proxy server has to modify attributes (by rule in hints file) in requests to 1 server and hasn't to modify attributes in requests to 2 server.

Is this possible?

Yes. You can run the requests through different virtual servers.

This is documented. There are examples.

Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

...

How can I specify:

1) server_one has to modify and proxy requests to 192.168.0.10:1812 2) server_two has to proxy requests to 192.168.0.11:1812

put the required attribute filters and rewrites into each server section. then they'll do the right thing. I'd use unlang to write the Proxy stuff for each server too. then proxy.conf is easy/easier - you just define the 2 REALMS and have those servers you mentioned within their correct realms.

Iserver_one and server_two have to process all requests. Are following realms correct? realm DEFAULT { type = radius authhost = 192.168.0.10:1812 accthost = 192.168.0.10:1813 secret = testing123 } realm DEFAULT { type = radius authhost = 192.168.0.11:1812 accthost = 192.168.0.11:1813 secret = testing123 }

realm DEFAULT1 {

type = radius authhost = 192.168.0.10:1812 accthost = 192.168.0.10:1813 secret = testing123 }

realm DEFAULT2 {

type = radius authhost = 192.168.0.11:1812 accthost = 192.168.0.11:1813 secret = testing123 }

and use unlang to set the Proxy-To-Realm for each server

Should I put the Proxy-To-Realm code to preacct section? server server_one { ... preacct { preprocess acct_unique suffix update control { Proxy-To-Realm := "DEFAULT1" } files } } server server_two { ... preacct { preprocess acct_unique suffix update control { Proxy-To-Realm := "DEFAULT2" } files } } Thanks a lot.