Hi people, I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS correctly with one remote server, but if I add in my proxy.conf file a redundant one because the primary RADIUS fails, it doesn't work correctly. I want to do roaming with two remote RADIUS servers to the domain1 since my RADIUS. However, I get only do roaming with the first one, because withe the first fails, my RADIUS doesn't ask to the second remote RADIUS server. Could you tell me where is the configuration bug? I attached my proxy.conf file: ******************************************* proxy server { synchronous = no retry_delay = 5 retry_count = 3 dead_time = 120 default_fallback = yes post_proxy_authorize = yes } realm domain1 { type = radius authhost = 123.123.123.123:11812 accthost = 123.123.123.123:11813 secret = secret nostrip } realm domain1 { type = radius authhost = 123.123.123.124:11812 accthost = 123.123.123.124:11813 secret = secret nostrip } **************************************** _________________________________________________________________ Descarga gratis la Barra de Herramientas de MSN http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www....
Have you tried: ---CUT--- #realm serv.com { # type = radius # authhost = radius.serv.com:1645 # accthost = radius.serv.com:1646 # secret = TheirKey # ldflag = round_robin # nostrip #} # # Another node for serv.com # #realm serv.com { # type = radius # authhost = radius2.serv.com:1645 # accthost = radius2.serv.com:1646 # secret = TheirKey2 # ldflag = round_robin # nostrip #} ---CUT--- This is from the proxy.conf file. I have not tested it... But I don't see why it wouldn't work. -----Original Message----- From: freeradius-users-bounces+rmcguire=suffolk.edu@lists.freeradius.org [mailto:freeradius-users-bounces+rmcguire=suffolk.edu@lists.freeradius.org] On Behalf Of Santiago Balaguer García Sent: Monday, April 24, 2006 9:49 AM To: freeradius-users@lists.freeradius.org Subject: Proxy RADIUS problem Hi people, I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS correctly with one remote server, but if I add in my proxy.conf file a redundant one because the primary RADIUS fails, it doesn't work correctly. I want to do roaming with two remote RADIUS servers to the domain1 since my RADIUS. However, I get only do roaming with the first one, because withe the first fails, my RADIUS doesn't ask to the second remote RADIUS server. Could you tell me where is the configuration bug? I attached my proxy.conf file: ******************************************* proxy server { synchronous = no retry_delay = 5 retry_count = 3 dead_time = 120 default_fallback = yes post_proxy_authorize = yes } realm domain1 { type = radius authhost = 123.123.123.123:11812 accthost = 123.123.123.123:11813 secret = secret nostrip } realm domain1 { type = radius authhost = 123.123.123.124:11812 accthost = 123.123.123.124:11813 secret = secret nostrip } **************************************** _________________________________________________________________ Descarga gratis la Barra de Herramientas de MSN http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www. hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Le Mon, Apr 24, 2006 at 10:37:53AM -0400, Reynold McGuire ecrivait:
Have you tried:
---CUT--- #realm serv.com { # type = radius # authhost = radius.serv.com:1645 # accthost = radius.serv.com:1646 # secret = TheirKey # ldflag = round_robin # nostrip #}
# # Another node for serv.com # #realm serv.com { # type = radius # authhost = radius2.serv.com:1645 # accthost = radius2.serv.com:1646 # secret = TheirKey2 # ldflag = round_robin # nostrip #} ---CUT---
This is from the proxy.conf file. I have not tested it... But I don't see why it wouldn't work.
He just forgot ldflag = round_robin in both realms definition. Fox.
My problem with the configuration above described is my RADIUS proxy doesn't active fallover. It means the first entry falis, freeradius doesn't verify the following entry of domain1. I test putting the label: ldflag = fail_over in the description os a realm entry. Whay can I do???
Hi people,
I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS correctly with one remote server, but if I add in my proxy.conf file a redundant one because the primary RADIUS fails, it doesn't work correctly.
I want to do roaming with two remote RADIUS servers to the domain1 since my RADIUS. However, I get only do roaming with the first one, because withe the first fails, my RADIUS doesn't ask to the second remote RADIUS server. Could you tell me where is the configuration bug?
I attached my proxy.conf file:
******************************************* proxy server { synchronous = no retry_delay = 5 retry_count = 3 dead_time = 120 default_fallback = yes post_proxy_authorize = yes }
realm domain1 { type = radius authhost = 123.123.123.123:11812 accthost = 123.123.123.123:11813 secret = secret
ldflag = fail_over
nostrip } realm domain1 { type = radius authhost = 123.123.123.124:11812 accthost = 123.123.123.124:11813 secret = secret
ldflag = fail_over
nostrip } ****************************************
_________________________________________________________________ ¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en MSN Motor. http://motor.msn.es/researchcentre/
participants (3)
-
Francois-Xavier GAILLARD -
Reynold McGuire -
Santiago Balaguer García