Hello, --1-- I am running FreeRADIUS 1.1.2 with MySQL database support. When I comment out the include line for proxy.conf, my users can no longer authenticate. The logs show their entire username + realm instead of just the username. I figure it is because it can't strip the realm anymore because it doesn't know what the realm is. There are REALM sections in the proxy.conf, with type, authhost, and accthost statements. I have entries there for each of my realms. I have not found an equivalent to the REALMS section of proxy.conf in MySQL. Do I use the radgroupcheck table? If so, do I add the authost and accthost lines? --2-- Does auth-type=local have to be in both radgroupcheck and radgroupreply? Cliff
"Cliff Hayes" <chayes@afo.net> wrote:
When I comment out the include line for proxy.conf, my users can no longer authenticate. The logs show their entire username + realm instead of just the username. I figure it is because it can't strip the realm anymore because it doesn't know what the realm is.
Exactly.
There are REALM sections in the proxy.conf, with type, authhost, and accthost statements. I have entries there for each of my realms. I have not found an equivalent to the REALMS section of proxy.conf in MySQL. Do I use the radgroupcheck table? If so, do I add the authost and accthost lines?
You can't put the REALMS into SQL. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Ok. Thanks. I'm trying to learn. The instructions in radiusd.conf say the following: # To disable proxying, change the "yes" to "no", and comment the # $INCLUDE line. Here's the issue -- how can I comment out the include line if that is what causes my problem. I want to disable proxying. I thought, since that was in the instructions, there must be some other place to put realm info. Cliff -----Original Message----- From: freeradius-users-bounces+chayes=afo.net@lists.freeradius.org [mailto:freeradius-users-bounces+chayes=afo.net@lists.freeradius.org]On Behalf Of Alan DeKok Sent: Monday, September 18, 2006 1:20 PM To: FreeRadius users mailing list Subject: Re: Proxy.conf "Cliff Hayes" <chayes@afo.net> wrote:
When I comment out the include line for proxy.conf, my users can no longer authenticate. The logs show their entire username + realm instead of just the username. I figure it is because it can't strip the realm anymore because it doesn't know what the realm is.
Exactly.
There are REALM sections in the proxy.conf, with type, authhost, and accthost statements. I have entries there for each of my realms. I have not found an equivalent to the REALMS section of proxy.conf in MySQL. Do I use the radgroupcheck table? If so, do I add the authost and accthost lines?
You can't put the REALMS into SQL. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Cliff Hayes" <chayes@afo.net> wrote:
The instructions in radiusd.conf say the following:
# To disable proxying, change the "yes" to "no", and comment the # $INCLUDE line.
Here's the issue -- how can I comment out the include line if that is what causes my problem. I want to disable proxying. I thought, since that was in the instructions, there must be some other place to put realm info.
It looks like the documentation is incorrect. In any case, the server does NOT do proxying in the default config. You have to configure realms for proxying to occur. So to disable proxying... just don't create realms. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Cliff Hayes