sending accounting for two home servers
Is it possible to send accounting packets to two home servers? In fact, one server is real auth+acct server, and another server is a web filter that applies rules according information at start packets. -- С уважением, Евгений Кожуховский Руководитель группы сервисных платформ УИТ ЦИТС МГТС РУП Белтелеком +375-29-3998175 +375-29-7561625 +375-17-3060026
I don't think that is possible, most of the time you would want to either tie the RADIUS server into your web filter or the web filter into your RADIUS, not send to both independently. The security risks in doing such a thing are just too much. Just My $.02 Jake Sallee Godfather Of Bandwidth Network Engineer Fone: 254-295-4658 Phax: 254-295-4221 -----Original Message----- From: freeradius-users-bounces+jake.sallee=umhb.edu@lists.freeradius.org [mailto:freeradius-users-bounces+jake.sallee=umhb.edu@lists.freeradius.org] On Behalf Of Evgeniy Kozhuhovskiy Sent: Friday, September 24, 2010 9:19 AM To: FreeRadius users mailing list Subject: sending accounting for two home servers Is it possible to send accounting packets to two home servers? In fact, one server is real auth+acct server, and another server is a web filter that applies rules according information at start packets. -- С уважением, Евгений Кожуховский Руководитель группы сервисных платформ УИТ ЦИТС МГТС РУП Белтелеком +375-29-3998175 +375-29-7561625 +375-17-3060026 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SORY! I misread your message! Accounting packets may be different, I was thinking authentication. My apologies. Jake Sallee Godfather Of Bandwidth Network Engineer Fone: 254-295-4658 Phax: 254-295-4221 -----Original Message----- From: freeradius-users-bounces+jake.sallee=umhb.edu@lists.freeradius.org [mailto:freeradius-users-bounces+jake.sallee=umhb.edu@lists.freeradius.org] On Behalf Of Evgeniy Kozhuhovskiy Sent: Friday, September 24, 2010 9:19 AM To: FreeRadius users mailing list Subject: sending accounting for two home servers Is it possible to send accounting packets to two home servers? In fact, one server is real auth+acct server, and another server is a web filter that applies rules according information at start packets. -- С уважением, Евгений Кожуховский Руководитель группы сервисных платформ УИТ ЦИТС МГТС РУП Белтелеком +375-29-3998175 +375-29-7561625 +375-17-3060026 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thnx. Already. But is it possible to do such thing without accounting files enabled?
Is it possible to send accounting packets to two home servers? Read raddb/sites-available/copy-acct-to-home-server
-- С уважением, Евгений Кожуховский Руководитель группы сервисных платформ УИТ ЦИТС МГТС РУП Белтелеком +375-29-7561625 +375-17-3060026
Evgeniy Kozhuhovskiy wrote:
Thnx. Already. But is it possible to do such thing without accounting files enabled?
What does that mean? Not that it matters... the way to send accounting packets to two locations is via the method I previously described. If you want to use another method, patch the server. Alan DeKok.
Thnx. Already. But is it possible to do such thing without accounting files enabled?
What does that mean?
Not that it matters... the way to send accounting packets to two locations is via the method I previously described. If you want to use another method, patch the server.
May be we've misunderstood each other. But, as far I understand, you suggest such scheme: First, we're proxying packet to home_server1 using realm module Second, we store packet in pre_proxy_log Then, we read it using detail listener from another virtual server Last, we proxy it again using Proxy-To-Realm from second virtual server Or not?
Evgeniy Kozhuhovskiy wrote:
May be we've misunderstood each other. But, as far I understand, you suggest such scheme:
First, we're proxying packet to home_server1 using realm module Second, we store packet in pre_proxy_log Then, we read it using detail listener from another virtual server Last, we proxy it again using Proxy-To-Realm from second virtual server
Yes. Alan DeKok.
participants (3)
-
Alan DeKok -
Evgeniy Kozhuhovskiy -
Sallee, Stephen (Jake)