1.1.7 to 2.0.2 config for Realms problem
I have a problem with a realm configuration that used to work with FR 1.1.7, but does not work at all with 2.0.2 and virtual servers. I have a virtual server defined in sites-available/janet-roaming thus: server jrsradius { listen { ipaddr = jrsradius2.liv.ac.uk port = 0 type = auth } listen { ipaddr = jrsradius2.liv.ac.uk port = 0 type = acct } proxy_requests = yes $INCLUDE jrs-proxy.conf $INCLUDE jrs-clients.conf authorize { preprocess chap mschap suffix eap { ok = return } unix files ldap expiration logintime pap } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } unix Auth-Type LDAP { ldap } eap } ... some stuff removed for brevity! } jrs-proxy.conf contains: proxy server { default_fallback = no post_proxy_authorize = no } home_server localhost { type = auth ipaddr = 127.0.0.1 port = 1812 secret = testing123 response_window = 20 zombie_period = 40 revive_interval = 120 status_check = status-server check_interval = 30 num_answers_to_alive = 3 } realm LOCAL { # If we do not specify a server pool, the realm is LOCAL, and # requests are not proxied to it. type = radius authhost = LOCAL accthost = LOCAL } realm NULL { type = radius authhost = LOCAL accthost = LOCAL } realm liv.ac.uk { type = radius authhost = LOCAL accthost = LOCAL } realm liverpool.ac.uk { type = radius authhost = LOCAL accthost = LOCAL } (stuff for JENET NRPS servers removed) But logging in as testuser@liverpool.ac.uk I get: Thu Jun 5 11:57:21 2008 : Debug: rlm_realm: Looking up realm "liverpool.ac.uk" for User-Name = "testuser@liverpool.ac.uk" Thu Jun 5 11:57:21 2008 : Debug: rlm_realm: No such realm "liverpool.ac.uk" What have I done wrong in defining the realms for liv.ac.uk and liverpool.ac.uk? Wrong place? Wrong syntax? They are not mentioned during server startup with "-X and -xx" beyond: Thu Jun 5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/sites-enabled/janet-roaming Thu Jun 5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/jrs-proxy.conf so is the config being ignored because it is wrong? Thanks. --------------- Barry Dean Networks Team Computing Services Department Tel: 0151 794 5641 (x45641)
Dean, Barry wrote:
I have a problem with a realm configuration that used to work with FR 1.1.7, but does not work at all with 2.0.2 and virtual servers.
I have a virtual server defined in sites-available/janet-roaming thus:
server jrsradius { ... $INCLUDE jrs-proxy.conf
jrs-proxy.conf contains:
proxy server { default_fallback = no post_proxy_authorize = no }
The proxy configuration is global. The default configuration shows it as global.
home_server localhost {
Home servers are also global.
They are not mentioned during server startup with "-X and -xx" beyond:
Thu Jun 5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/sites-enabled/janet-roaming Thu Jun 5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/jrs-proxy.conf
so is the config being ignored because it is wrong?
It's being ignored because the proxy && realm configurations are in the server section. They must be global. Alan DeKok.
Thanks. All working now! One more thing, what happened to: lower_user lower_pass nospace_user nospace_pass between 1.1.7 and 2.0.x? Are they still supported? --------------- Barry Dean Networks Team -----Original Message----- From: freeradius-users-bounces+b.dean=liverpool.ac.uk@lists.freeradius.org [mailto:freeradius-users-bounces+b.dean=liverpool.ac.uk@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 05 June 2008 12:17 To: FreeRadius users mailing list Subject: Re: 1.1.7 to 2.0.2 config for Realms problem Dean, Barry wrote:
I have a problem with a realm configuration that used to work with FR 1.1.7, but does not work at all with 2.0.2 and virtual servers.
I have a virtual server defined in sites-available/janet-roaming thus:
server jrsradius { ... $INCLUDE jrs-proxy.conf
jrs-proxy.conf contains:
proxy server { default_fallback = no post_proxy_authorize = no }
The proxy configuration is global. The default configuration shows it as global.
home_server localhost {
Home servers are also global.
They are not mentioned during server startup with "-X and -xx" beyond:
Thu Jun 5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/sites-enabled/janet-roaming Thu Jun 5 11:57:16 2008 : Debug: including configuration file /usr/radius/etc/raddb/jrs-proxy.conf
so is the config being ignored because it is wrong?
It's being ignored because the proxy && realm configurations are in the server section. They must be global. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Dean, Barry