Hello. I am trying to setup FreeRadius server so it proxies all requests to Server1 and also sends copy of accounting packets to Server2. Proxying is working fine, but I cant get the copy-acct-to-home-server function to work. At the moment, authentication works fine, but accounting packets gets only to Server2. Any idea what I do wrong ? Thanks in advance for any help, its appreciated. --- Server log --- Polling for detail file /var/log/radius/radacct/detail detail_recv: Renaming /var/log/radius/radacct/detail -> /var/log/radius/radacct/detail.work detail_recv: Read packet from /var/log/radius/radacct/detail.work Acct-Session-Id = "6000006B" User-Name = "xxx" NAS-Port-Type = Ethernet Acct-Status-Type = Start Acct-Delay-Time = 1 NAS-IP-Address = x.x.x.x Acct-Unique-Session-Id = "3abb2fc097796361" Stripped-User-Name = "xxx" Realm = "DEFAULT" Packet-Original-Timestamp = "Aug 26 2009 00:27:37 EDT" server copy-acct-to-home-server { +- entering group preacct {...} ++[preprocess] returns ok [suffix] Request already proxied. Ignoring. ++[suffix] returns ok +- entering group accounting {...} ++[ok] returns ok } # server copy-acct-to-home-server Finished request 1. Cleaning up request 1 ID 24938 with timestamp +6 Going to the next request Waking up in 1.0 seconds. --- proxy.conf --- proxy server { default_fallback = yes } home_server acct_server1 { type = acct port = 1813 ipaddr = x.x.x.x secret = xxxx } home_server acct_server2 { type = acct port = 1813 ipaddr = x.x.x.x secret = xxxx } home_server_pool my_acct_pool { home_server = acct_server1 home_server = acct_server2 } realm DEFAULT { type = radius authhost = server1:1812 accthost = server1:1813 acct_pool = my_acct_pool secret = xxxx }
You have defined your 2 home server in a single pool Unfortunately, home_server_pool are only of type fail-over (packet sent to the second server *ONLY* if first fails) or load-balance (differents flavours) but not type allow for acct packet to be sent to both server. You must use detail-file and detail listener vhost (check the sample vhost config copy-acct-to-home-server ). Le jeudi 27 août 2009 à 21:28 +0200, kokkola@anonymizer.cz a écrit :
Hello.
I am trying to setup FreeRadius server so it proxies all requests to Server1 and also sends copy of accounting packets to Server2. Proxying is working fine, but I cant get the copy-acct-to-home-server function to work.
At the moment, authentication works fine, but accounting packets gets only to Server2.
Any idea what I do wrong ?
Thanks in advance for any help, its appreciated.
--- Server log ---
Polling for detail file /var/log/radius/radacct/detail detail_recv: Renaming /var/log/radius/radacct/detail -> /var/log/radius/radacct/detail.work detail_recv: Read packet from /var/log/radius/radacct/detail.work Acct-Session-Id = "6000006B" User-Name = "xxx" NAS-Port-Type = Ethernet Acct-Status-Type = Start Acct-Delay-Time = 1 NAS-IP-Address = x.x.x.x Acct-Unique-Session-Id = "3abb2fc097796361" Stripped-User-Name = "xxx" Realm = "DEFAULT" Packet-Original-Timestamp = "Aug 26 2009 00:27:37 EDT" server copy-acct-to-home-server { +- entering group preacct {...} ++[preprocess] returns ok [suffix] Request already proxied. Ignoring. ++[suffix] returns ok +- entering group accounting {...} ++[ok] returns ok } # server copy-acct-to-home-server Finished request 1. Cleaning up request 1 ID 24938 with timestamp +6 Going to the next request Waking up in 1.0 seconds.
--- proxy.conf ---
proxy server { default_fallback = yes }
home_server acct_server1 { type = acct port = 1813 ipaddr = x.x.x.x secret = xxxx }
home_server acct_server2 { type = acct port = 1813 ipaddr = x.x.x.x secret = xxxx }
home_server_pool my_acct_pool { home_server = acct_server1 home_server = acct_server2 }
realm DEFAULT { type = radius authhost = server1:1812 accthost = server1:1813 acct_pool = my_acct_pool secret = xxxx } - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alexandre Chapellon -
kokkola＠anonymizer.cz