Hello... I am currently using freeRadius to proxy messages between a client and server as follows: radius client ----------freeRadius--------------radius server The client normally send access_request messages which are proxyed to the server. The server can either respond with access-accept or access-reject. That is all working fine at the moment. What I need to do now, is the following: 1. If the server sends access-accept, then proxy the message back to the client (like it is being done at the moment) 2. If the server sends access-reject, then do not proxy, just drop the packet. Is that possible?
Diego Quevedo wrote:
What I need to do now, is the following:
1. If the server sends access-accept, then proxy the message back to the client (like it is being done at the moment) 2. If the server sends access-reject, then do not proxy, just drop the packet.
Is that possible?
Yes. See the "post-proxy" section, and the "do_not_respond" policy in policy.conf. Alan DeKok.
Hi,
1. If the server sends access-accept, then proxy the message back to the client (like it is being done at the moment) 2. If the server sends access-reject, then do not proxy, just drop the packet.
eerr, why? that is horribly broken and will cause lots of issues with clients - making them believe, for example , that the RADIUS server (proxy) is dead and stop sending ANY packets to the RADIUS server (proxy) alan
yes, that was the idea. It will be too much of a long story to explain why I needed it to behave that way :)
Date: Thu, 31 May 2012 19:50:33 +0100 From: A.L.M.Buxey@lboro.ac.uk To: freeradius-users@lists.freeradius.org Subject: Re: help on proxy
Hi,
1. If the server sends access-accept, then proxy the message back to the client (like it is being done at the moment) 2. If the server sends access-reject, then do not proxy, just drop the packet.
eerr, why? that is horribly broken and will cause lots of issues with clients - making them believe, for example , that the RADIUS server (proxy) is dead and stop sending ANY packets to the RADIUS server (proxy)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
alan buxey -
Alan DeKok -
Diego Quevedo