No accounting replies to NAS'es!
Hi. I might have missunderstood some concepts here! We have a freeradius server as proxy, but it's doing all the accounting by itself. Authentication is handled by remote servers, i.e. other freeradius'es and IAS'es. Accounting is logged fine to detail files and a remote Postgresql DB. So, as I understood it, I have made proxy.conf setups like the following example: realm student.X.Y { type = radius authhost = studentserv.X.Y:1812 accthost = LOCAL secret = <some secret> nostrip } Setting accthost to LOCAL for handling the accounting. The problem is that the NAS'es never recieves any accounting reply and I don't understand why? This causes the NAS'es (cisco switches) to timeout and retransmit lotsof duplicates. So, any hints to why replies are not sent back? - Erling -- ----------------|sig|--- Erling.Paulsen@cc.uit.no Nettseksjonen, ITavd UiT
Erling Paulsen wrote:
realm student.X.Y { type = radius authhost = studentserv.X.Y:1812 accthost = LOCAL secret = <some secret> nostrip }
Setting accthost to LOCAL for handling the accounting. The problem is that the NAS'es never recieves any accounting reply and I don't understand why?
It's a known bug of 1.0.x versions of FreeRADIUS. Try to replace the file src/main/acct.c in the source tree by the file you can download there: http://www.freeradius.org/cgi-bin/cvsweb.cgi/~checkout~/radiusd/src/main/acc... Then rebuild the server and try your setup again. -- Nicolas Baradakis
Hi!
Setting accthost to LOCAL for handling the accounting. The problem is that the NAS'es never recieves any accounting reply and I don't understand why?
Is there possibly a firewall blocking the packets (UDP 1813 by default)? You should check with a packet sniffer on your server if the packets are sent or not. Greetings, Stefan Winter -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingénieur de recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu tél.: +352 424409-1 http://www.restena.lu fax: +352 422473
participants (3)
-
Erling Paulsen -
Nicolas Baradakis -
Stefan Winter