FreeRadius 2.0 proxy question - home_server auth and acct server?
With the new 2.0 release do we have to make 2 entries for each home server? 1 for auth packets and 1 for acct packets? -- Brian
Brian Walters wrote:
With the new 2.0 release do we have to make 2 entries for each home server? 1 for auth packets and 1 for acct packets?
Yes, because they are *different* servers. They may be different programs that share no memory or configuration. Or, you can continue to use the old-style "accthost" and "authhost" directives in the "realms" section. The server may complain in debugging mode, but it will work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Brian Walters wrote:
With the new 2.0 release do we have to make 2 entries for each home server? 1 for auth packets and 1 for acct packets?
Yes, because they are *different* servers. They may be different programs that share no memory or configuration.
Or, you can continue to use the old-style "accthost" and "authhost" directives in the "realms" section. The server may complain in debugging mode, but it will work.
Even in 1.1, FreeRADIUS makes the distinction between auth and acct hosts for remote servers, when marking them dead. Geoff. _____________________________________________________________________________ Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail
On Tue, 2007-05-15 at 18:46 +0200, Geoffroy Arnoud wrote:
Even in 1.1, FreeRADIUS makes the distinction between auth and acct hosts for remote servers, when marking them dead.
Indeed! but the authhost and accthost entries can be listed next to each other for each realm. I just wanted to make sure there wasn't a short cut of allowing a home server to be both. Even with adding 2 entries for each home server (1 auth, 1 acct) it's still a big saving with lots of realms. -- Brian
Brian Walters wrote:
but the authhost and accthost entries can be listed next to each other for each realm. I just wanted to make sure there wasn't a short cut of allowing a home server to be both. Even with adding 2 entries for each home server (1 auth, 1 acct) it's still a big saving with lots of realms.
I suppose that could be added. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (3)
-
Alan Dekok -
Brian Walters -
Geoffroy Arnoud