Freeraduis as accounting proxy
Hello, I'm trying to set up my freeradius to be an accounting proxy. No it only receives acct packets and saves data in log files. The configuration is below: radiusd.conf: accounting { detail fail } detail { detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d%H.log } client.conf: client 126.18.130.8 { secret = faultcenter shortname = fault-center } I added the following to the proxy.conf, but freeradius don't sends any accounting packets: realm LOCAL { type = radius authhost = 126.20.50.230:1812 accthost = 126.20.50.230:1813 secret = fault } realm NULL { type = radius authhost = 126.20.50.230:1812 accthost = 126.20.50.230:1813 secret = fault } realm DEFAULT { type = radius authhost = 126.20.50.230:1812 accthost = 126.20.50.230:1813 secret = fault } Can somebody help? -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeraduis-as-accounting-proxy-tp571... Sent from the FreeRadius - User mailing list archive at Nabble.com.
peterpz wrote:
I'm trying to set up my freeradius to be an accounting proxy. No it only receives acct packets and saves data in log files. The configuration is below:
radiusd.conf:
accounting { detail fail }
Huh? You want it to *fail* accounting?
I added the following to the proxy.conf, but freeradius don't sends any accounting packets:
realm LOCAL { type = radius authhost = 126.20.50.230:1812 accthost = 126.20.50.230:1813 secret = fault }
That is wrong. Delete that, and change it back to the default configuration.
Can somebody help?
Read raddb/sites-available/default. Look in the "accounting" section. If you had left the default configuration alone, and just added a "DEFAULT" realm, then proxying would have worked. Butchering the default configuration is bad. Not reading the comments in the default configuration is bad. Don't break the server. Read the documentation. Alan DeKok.
Unfortunately I don't have the file: raddb/sites-available/default, because it is the FreeRADIUS.net 1.1.7-r0.0.2 for Windows... I even don't have the folder sites-available in the raddb folder, so I don't have this documentation and am trying to configure it blind. I had to put fail string in the accounting module, because my sever has to only receive packets and not response. Without fail it responded to the main server which was not acceptable. Can this cause my problems with proxy? I modified now the proxy.conf file, but it still don't send any accounting packets to the 126.20.50.230 :( realm LOCAL { type = radius authhost = LOCAL accthost = LOCAL } realm NULL { type = radius authhost = 126.20.50.230:1812 accthost = 126.20.50.230:1813 secret = fault } realm DEFAULT { type = radius authhost = 126.20.50.230:1812 accthost = 126.20.50.230:1813 secret = fault } -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeraduis-as-accounting-proxy-tp571... Sent from the FreeRadius - User mailing list archive at Nabble.com.
peterpz wrote:
Unfortunately I don't have the file: raddb/sites-available/default, because it is the FreeRADIUS.net 1.1.7-r0.0.2 for Windows... I even don't have the folder sites-available in the raddb folder, so I don't have this documentation and am trying to configure it blind.
See radiusd.conf. It has largely the same configuration. Again, you *deleted* the configuration which used the realms, and proxied the packet. Don't do that. If you don't understand how the server works, then don't edit the configuration.
I had to put fail string in the accounting module, because my sever has to only receive packets and not response. Without fail it responded to the main server which was not acceptable. Can this cause my problems with proxy?
Yes. It means that it won't proxy the request.
I modified now the proxy.conf file, but it still don't send any accounting packets to the 126.20.50.230 :(
Look for the "accounting" section in radiusd.conf. Look for the comments about realms. DON'T edit the default configuration unless you understand how it works. Butchering it by deleted 99% of the "accounting" section is WRONG. Alan DeKok.
participants (2)
-
Alan DeKok -
peterpz