Hi all, How can I replicate to more than 1 server? I have set up replication to one host, but when I set up a second host it does not replicate to it. However the first host works perfectly. I am using freeradius-2.2.0-1 This is what I have in my proxy.conf file. home_server ALOTT-SMP { type = acct ipaddr = 192.168.xx.xx port = 1813 secret = xxxxxxxx src_ipaddr = 192.168.xx.xx require_message_authenticator = no response_window = 4 zombie_period = 40 status_check = status-server check_interval = 30 num_answers_to_alive = 3 max_outstanding = 65536 } home_server_pool ALLOT-SMP { # type = fail-over home_server = ALOTT-SMP } home_server PROCERA-SMP { type = acct ipaddr = 192.168.xx.xx port = 1813 secret = xxxxxxx src_ipaddr = 192.168.xx.xx require_message_authenticator = no response_window = 4 zombie_period = 40 status_check = status-server check_interval = 30 num_answers_to_alive = 3 max_outstanding = 65536 } home_server_pool PROCERA-SMP { type = fail-over home_server = PROCERA-SMP } realm example.com { authhost = LOCAL accthost = LOCAL type = radius preacct { update control { #Replicate-To-Realm := 'ALLOT-SMP' Proxy-To-Realm := 'ALLOT-SMP' Proxy-To-Realm += 'PROCERA-SMP' } } accounting { replicate } } To read FirstRand Bank's Disclaimer for this email click on the following address or copy into your Internet browser: https://www.fnb.co.za/disclaimer.html If you are unable to access the Disclaimer, send a blank e-mail to firstrandbankdisclaimer@fnb.co.za and we will send you a copy of the Disclaimer.
Sorted. I did this in my acct_users file: DEFAULT Replicate-To-Realm := "ALLOT-SMP",Replicate-To-Realm += "Procera-SMP" On 12/09/2013 08:29, Tom Cooper wrote:
Hi all, How can I replicate to more than 1 server? I have set up replication to one host, but when I set up a second host it does not replicate to it. However the first host works perfectly. I am using freeradius-2.2.0-1
This is what I have in my proxy.conf file.
home_server ALOTT-SMP { type = acct ipaddr = 192.168.xx.xx port = 1813 secret = xxxxxxxx src_ipaddr = 192.168.xx.xx require_message_authenticator = no response_window = 4 zombie_period = 40 status_check = status-server check_interval = 30 num_answers_to_alive = 3 max_outstanding = 65536 }
home_server_pool ALLOT-SMP { # type = fail-over home_server = ALOTT-SMP }
home_server PROCERA-SMP { type = acct ipaddr = 192.168.xx.xx port = 1813 secret = xxxxxxx src_ipaddr = 192.168.xx.xx require_message_authenticator = no response_window = 4 zombie_period = 40 status_check = status-server check_interval = 30 num_answers_to_alive = 3 max_outstanding = 65536 }
home_server_pool PROCERA-SMP { type = fail-over home_server = PROCERA-SMP }
realm example.com { authhost = LOCAL accthost = LOCAL type = radius preacct { update control { #Replicate-To-Realm := 'ALLOT-SMP' Proxy-To-Realm := 'ALLOT-SMP' Proxy-To-Realm += 'PROCERA-SMP' } } accounting { replicate } } To read FirstRand Bank's Disclaimer for this email click on the following address or copy into your Internet browser: https://www.fnb.co.za/disclaimer.html
If you are unable to access the Disclaimer, send a blank e-mail to firstrandbankdisclaimer@fnb.co.za and we will send you a copy of the Disclaimer.
On 12 Sep 2013, at 08:17, "Cooper, Tom" <TCooper@fnb.co.za> wrote:
Sorted. I did this in my acct_users file:
DEFAULT Replicate-To-Realm := "ALLOT-SMP",Replicate-To-Realm += "Procera-SMP"
or preacct { update control { Replicate-To-Realm := "ALLOT-SMP" Replicate-To-Realm += "Procera-SMP" } replicate } Just be aware there's no retransmission, and any accounting responses received will be silently discarded. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
I did that as well. I included that in the original post. On 12/09/2013 09:28, Arran Cudbard-Bell wrote:
On 12 Sep 2013, at 08:17, "Cooper, Tom" <TCooper@fnb.co.za> wrote:
Sorted. I did this in my acct_users file:
DEFAULT Replicate-To-Realm := "ALLOT-SMP",Replicate-To-Realm += "Procera-SMP"
or
preacct { update control { Replicate-To-Realm := "ALLOT-SMP" Replicate-To-Realm += "Procera-SMP" }
replicate }
Just be aware there's no retransmission, and any accounting responses received will be silently discarded.
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
To read FirstRand Bank's Disclaimer for this email click on the following address or copy into your Internet browser: https://www.fnb.co.za/disclaimer.html If you are unable to access the Disclaimer, send a blank e-mail to firstrandbankdisclaimer@fnb.co.za and we will send you a copy of the Disclaimer.
On 12 Sep 2013, at 10:35, "Cooper, Tom" <TCooper@fnb.co.za> wrote:
I did that as well. I included that in the original post.
No you didn't. You included a bunch of shit config that didn't work in your first post. You can't put server sections in realms, it doesn't work. Just because the server doesn't complain, doesn't mean that the config will actually be used. The config is parsed to an intermediary format. Only known config items and sections get any kind of validation. If the config is syntactically correct then the server will start. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
participants (2)
-
Arran Cudbard-Bell -
Cooper, Tom