Hello Alan Thanks for you replay. I have configured freeradius to make preproxing. But i have another problem: The "Reply-Message" didn't reach the application wich have been made auth request. Ready to process requests. rad_recv: Access-Request packet from host 11.0.0.2:3187, id=30, length=44 User-Name = "igor" User-Password = "\330\014\257}" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/auth-detail-20050601' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/auth-detail-20050601 modcall[authorize]: module "auth_log" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "igor", looking up realm NULL rlm_realm: Found realm "NULL" rlm_realm: Adding Stripped-User-Name = "igor" rlm_realm: Proxying request from user igor to realm NULL rlm_realm: Adding Realm = "NULL" rlm_realm: Preparing to proxy authentication request to realm "NULL" modcall[authorize]: module "suffix" returns updated for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 Processing the pre-proxy section of radiusd.conf modcall: entering group pre-proxy for request 0 radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/pre-proxy-detail-20050601' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/pre-proxy-detail-20050601 modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 0 preproxy_users: Matched entry DEFAULT at line 17 radius_xlat: '' modcall[pre-proxy]: module "files" returns ok for request 0 modcall: group pre-proxy returns ok for request 0 Sending Access-Request of id 0 to 11.0.0.5:1812 User-Name = "igor" User-Password = "\330\014\257}" NAS-IP-Address = 11.0.0.2 Proxy-State = 0x3330 Calling-Station-Id := "" --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Reject packet from host 11.0.0.5:1812, id=0, length=43 Reply-Message = "Authorization failed." Processing the post-proxy section of radiusd.conf modcall: entering group post-proxy for request 0 radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/post-proxy-detail-20050601' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/post-proxy-detail-20050601 modcall[post-proxy]: module "post_proxy_log" returns ok for request 0 modcall[post-proxy]: module "eap" returns noop for request 0 modcall: group post-proxy returns ok for request 0 Login incorrect (Home Server says so): [igor/\330\014\257}] (from client test port 0) Delaying request 0 for 1 seconds Finished request 0 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 11.0.0.2:3187, id=30, length=44 Sending Access-Reject of id 30 to 11.0.0.2:3187 Reply-Message = "Authorization failed." --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 30 with timestamp 429db3c5 Nothing to do. Sleeping until we see a request. So, it receives replay only on sencond request. Application failed on the first request timeout. What to do? Thank you Alan DeKok <aland@ox.org> wrote: Maxim Hitrov wrote:
Can i use FreeRadius as intermadiate Radius that will change and forward Access-Requests params?
Yes. You should be able to do this using the "preproxy_users" file: DEFAULT Calling-Station-Id = "%{Framed-IP-Address}" Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Maxim Hitrov <mhitrov@yahoo.com> wrote:
I have configured freeradius to make preproxing. But i have another problem: The "Reply-Message" didn't reach the application wich have been made auth request.
The debug log you posted shows the server sending it.
So, it receives replay only on sencond request. Application failed on the first request timeout. What to do?
Set reject_delay=0 Alan DeKok.
participants (2)
-
Alan DeKok -
Maxim Hitrov