Ana Gallardo Gómez wrote:

Hello!

I want to use Freeradius as a proxy Radius server, and I think that my Freeradius don´t have to do authorize and authenticate: my Freeradius have to proccess request with realm "@unex.es", the others request have to be proxyed. My configuration is:

radiusd.conf:

authorize { preprocess suffix files Autz-Type LDAP_UNEX_ES{ ldap_unex_es } mschap eap }

authenticate { ldap_unex_es Auth-Type MS-CHAP { mschap } eap }

users:

DEFAULT Autz-Type = "LDAP_UNEX_ES"

proxy.conf:

realm unex.es <http://unex.es/> { type = radius authhost = LOCAL accthost = LOCAL }

realm NULL { type = radius authhost = LOCAL accthost = LOCAL }

realm DEFAULT { type = radius authhost = other_server_1 accthost = LOCAL secret = ****** nostrip }

realm DEFAULT { type = radius authhost = other_server_2 <http://radius2.rediris.es:1812/> accthost = LOCAL secret = ****** nostrip }

- I want to define two instances of "realm DEFAULT", in case one of then fails. It is posible?

Yes. See the comments at the top of proxy.conf

- Have my freeradius to do authorize and autheticate when request have to be proxyed?

No. You're almost there

- I think that in users file I have to distinguish between request with realm "@unex.es" to set Autz-Type = "LDAP_UNEX_ES" and the others...

Yes you do. Try this in the "users" file: DEFAULT Realm == "DEFAULT" Fall-Through = No DEFAULT Autz-Type := "LDAP_UNEX_ES"

I´m lost with proxy... I need help. Thank you.

You've almost got it. Let us know if you have any problems.

Sorry for my english.

Your english is great.