copy-acct-to-home-server example. need help
Hi, I use copy-acct-to-home-server example but the virtual server doesn't sends requests to the home server. I tried to proxy requests by Proxy-To-Realm attribute but it doesn't works. my configuration files: sites-available/copy-acct-to-home-server: server copy-acct-to-home-server { listen { type = detail filename = ${radacctdir}/detail load_factor = 10 } preacct { update control { Proxy-To-Realm := "CLD" } } accounting { ok } pre-proxy { } post-proxy { } } proxy.conf: realm CLD { type = radius accthost = 10.6.1.91:1813 secret = testing123 } I'm newbie and have no experience with freeradius. Maybe I forgot to add something in configuration files... Log: Polling for detail file /usr/local/var/log/radius/radacct/detail Waking up in 0.9 seconds. User-Name = "test" User-Password = "pass" Framed-Protocol = PPP NAS-Port-Id = "11123" +- entering group accounting expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/var/log/radius/radacct/127.0.0.1/detail-20080403 rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20080403 expand: %t -> Thu Apr 3 20:01:53 2008 ++[detail] returns ok Finished request 0. Cleaning up request 0 ID 83 with timestamp +61 Going to the next request Waking up in 0.6 seconds. Polling for detail file /usr/local/var/log/radius/radacct/detail Thank you.
Mikhail Novikov wrote:
I use copy-acct-to-home-server example but the virtual server doesn't sends requests to the home server.
Which version are you using? 2.0.3 has some fixes over 2.0.2...
I tried to proxy requests by Proxy-To-Realm attribute but it doesn't works.
Polling for detail file /usr/local/var/log/radius/radacct/detail Waking up in 0.9 seconds. User-Name = "test" User-Password = "pass"
Uh... no. That is an authentication request, not an accounting request. The server does NOT read authentication requests from the "detail" file.
Framed-Protocol = PPP NAS-Port-Id = "11123" +- entering group accounting expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/var/log/radius/radacct/127.0.0.1/detail-20080403 rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d
I's not running the configuration you have. I'm not sure why. You have a virtual server somewhere with only the "detail" module listed in the "accounting" section. I have no idea why that one is being run rather than this one... Alan DeKok.
Which version are you using? 2.0.3 has some fixes over 2.0.2...
I'm using FreeRadius 2.0.3.
User-Name = "test" User-Password = "pass"
Uh... no. That is an authentication request, not an accounting request. The server does NOT read authentication requests from the "detail" file.
I tried to send test requests by following command: $echo "User-Name=test,Password=pass,Framed-Protocol=PPP,Nas-Port-ID=11123 " | radclient 127.0.0.1:1813 acct testing123
You have a virtual server somewhere with only the "detail" module listed in the "accounting" section. I have no idea why that one is being run rather than this one...
I use sites-available/default file to configure other virtual server: authorize { } authenticate { } preacct { } accounting { detail } session { } post-auth { }
Mikhail Novikov wrote:
Uh... no. That is an authentication request, not an accounting request. The server does NOT read authentication requests from the "detail" file.
I tried to send test requests by following command: $echo "User-Name=test,Password=pass,Framed-Protocol=PPP,Nas-Port-ID=11123 " | radclient 127.0.0.1:1813 acct testing123
That is not a valid accounting packet.
You have a virtual server somewhere with only the "detail" module listed in the "accounting" section. I have no idea why that one is being run rather than this one...
I use sites-available/default file to configure other virtual server: authorize { }
Really? You have gone out of your way to destroy the default configurations? Why? Alan DeKok.
Polling for detail file /usr/local/var/log/radius/radacct/detail Waking up in 0.9 seconds. User-Name = "test" User-Password = "pass"
Uh... no. That is an authentication request, not an accounting request. The server does NOT read authentication requests from the "detail" file.
I sent accounting request but virtual server doesn't proxy this request to destination. Polling for detail file /usr/local/var/log/radius/radacct/detail Waking up in 0.9 seconds. Acct-Session-Id = "6000006B" User-Name = "Fnord" NAS-IP-Address = 192.168.3.5 NAS-Port-Id = "32" NAS-Port-Type = Async Acct-Status-Type = Start Connect-Info = "46000 LAPM/V42BIS" Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 192.168.5.66 Acct-Delay-Time = 0 +- entering group accounting expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/var/log/radius/radacct/127.0.0.1/detail-20080403 rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20080403 expand: %t -> Thu Apr 3 21:31:40 2008 ++[detail] returns ok Finished request 0. Cleaning up request 0 ID 148 with timestamp +98 Going to the next request Polling for detail file /usr/local/var/log/radius/radacct/detail Waking up in 0.9 seconds.
Mikhail Novikov wrote: ...
+- entering group accounting expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d
It's still sending the request to the default virtual server, and not to the proper one. Since it seems to work for me, my suggestion is to STOP destroying the configuration. Start with the default configuration, and work from there. Alan DeKok.
participants (2)
-
Alan DeKok -
Mikhail Novikov