Virtual server basic proxy configuration?
Freeradius gurus, I have looked over the documentation and searched for examples and haven't found anything concrete that I feel will solve my configuration. Perhaps someone has implemented this or can offer up some advice on how to approach this. Basically wanting to create a virtual server listening on port 1818 that simply proxies ALL AUTH requests to radius1.gatech.edu port 1812. I am used to the virtual-server configuration as I have multiple radius based services running on different ports, but am not sure how to only proxy those entries on that particular virtual server and not the other virtual servers I have running on this server. At a first read/glance, it looks like the proxy settings might apply to all virtual servers instead of just the one on port 1818 that I am defining. From reading "proxy.conf" would I just define something like: home_server radius1 { type = auth ipaddr = 10.10.10.10 port = 1818 secret = testing123 } Now...I am not sure how to apply this to a single virtual server. All I really want to do is redirect the requests and respond. Any tips would be appreciated, - John Douglass, Georgia Institute of Technology
On 3 Oct 2011, at 17:22, John Douglass wrote:
Freeradius gurus,
I have looked over the documentation and searched for examples and haven't found anything concrete that I feel will solve my configuration. Perhaps someone has implemented this or can offer up some advice on how to approach this.
Basically wanting to create a virtual server listening on port 1818 that simply proxies ALL AUTH requests to radius1.gatech.edu port 1812. I am used to the virtual-server configuration as I have multiple radius based services running on different ports, but am not sure how to only proxy those entries on that particular virtual server and not the other virtual servers I have running on this server. At a first read/glance, it looks like the proxy settings might apply to all virtual servers instead of just the one on port 1818 that I am defining.
From reading "proxy.conf" would I just define something like:
home_server radius1 { type = auth ipaddr = 10.10.10.10 port = 1818 secret = testing123 }
Now...I am not sure how to apply this to a single virtual server. All I really want to do is redirect the requests and respond.
Just use a listen block within the virtual server { } configuration. There's a template one in radiusd.conf Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
John Douglass wrote:
Basically wanting to create a virtual server listening on port 1818 that simply proxies ALL AUTH requests to radius1.gatech.edu port 1812.
Read raddb/sites-available/README It explains virtual servers in detail.
At a first read/glance, it looks like the proxy settings might apply to all virtual servers
Yes.
From reading "proxy.conf" would I just define something like:
Which defines a home server, just like normal.
Now...I am not sure how to apply this to a single virtual server. All I really want to do is redirect the requests and respond.
Redirecting the requests involves setting Proxy-To-Realm. So you'll need to set up a realm && home server pool for the above home server. Or, just use the old-style realms definition. It will still work. Then: server proxy_all { authorize { update control { Proxy-To-Realm := "nameOfRealm" } } } A seven line config. Can't get much simpler than that. Alan DeKok.
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
John Douglass