Radius proxy configuration
Hello, I need your help with freeradius proxy configuration. What I would like to do is to configure freeradius as a proxy to forward all the authentication requests to another radius server without having to wait for an answer from the RADIUS server. Could you please help me with this configuration? Thanks, Best regards, Roberta Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie. This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.
Maglione Roberta wrote:
What I would like to do is to configure freeradius as a proxy to forward all the authentication requests to another radius server without having to wait for an answer from the RADIUS server.
What does that mean? A proxy will forward a request, and then wait for the reply. If it doesn't wait, it's not a proxy. Alan DeKok.
What I was trying to do is to configure just the forwarding behavior for each authentication request, is it possible to just forward the requests? Thanks, Roberta -----Original Message----- From: freeradius-users-bounces+roberta.maglione=telecomitalia.it@lists.freeradius.org [mailto:freeradius-users-bounces+roberta.maglione=telecomitalia.it@lists.freeradius.org] On Behalf Of Alan DeKok Sent: martedì 24 maggio 2011 16.51 To: FreeRadius users mailing list Subject: Re: Radius proxy configuration Maglione Roberta wrote:
What I would like to do is to configure freeradius as a proxy to forward all the authentication requests to another radius server without having to wait for an answer from the RADIUS server.
What does that mean? A proxy will forward a request, and then wait for the reply. If it doesn't wait, it's not a proxy. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie. This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.
Thanks for the clarification and sorry for the basic question. I'm new on this list and I was trying to understand if I can achieve with freeradius a behavior similar to what could be done with another product (navisradius) by setting Radius-CopyMode. In navisradius Radius-CopyMode specifies that after forwarding the request to the remote RADIUS server processing automatically continues with the method. NavisRadius will not wait for a response from the remote server and any response received is discarded. Thanks, Regards, Roberta -----Original Message----- From: freeradius-users-bounces+roberta.maglione=telecomitalia.it@lists.freeradius.org [mailto:freeradius-users-bounces+roberta.maglione=telecomitalia.it@lists.freeradius.org] On Behalf Of Alan DeKok Sent: martedì 24 maggio 2011 17.08 To: FreeRadius users mailing list Subject: Re: Radius proxy configuration Maglione Roberta wrote:
What I was trying to do is to configure just the forwarding behavior for each authentication request, is it possible to just forward the requests?
No. As I said, the server expects a reply. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie. This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.
Maglione Roberta wrote:
Thanks for the clarification and sorry for the basic question. I'm new on this list and I was trying to understand if I can achieve with freeradius a behavior similar to what could be done with another product (navisradius) by setting Radius-CopyMode. In navisradius Radius-CopyMode specifies that after forwarding the request to the remote RADIUS server processing automatically continues with the method. NavisRadius will not wait for a response from the remote server and any response received is discarded.
See http://git.freeradius.org. Grab the "v2.1.x" branch, and look at raddb/modules/replicate. You will need to do "configure --with-experimental-modules" Alan DeKok.
On Wed, May 25, 2011 at 3:47 PM, Alan DeKok <aland@deployingradius.com> wrote:
Maglione Roberta wrote:
Thanks for the clarification and sorry for the basic question. I'm new on this list and I was trying to understand if I can achieve with freeradius a behavior similar to what could be done with another product (navisradius) by setting Radius-CopyMode. In navisradius Radius-CopyMode specifies that after forwarding the request to the remote RADIUS server processing automatically continues with the method. NavisRadius will not wait for a response from the remote server and any response received is discarded.
See http://git.freeradius.org. Grab the "v2.1.x" branch, and look at raddb/modules/replicate. You will need to do "configure --with-experimental-modules"
Also, that should only make sense for accounting (where FR can basically send a reply to NAS, and forward the request to home server without caring what the response is). For authentication (like you mentioned in original post), what would the purpose of forward-and-forget be? You'd still need the response from home server to determine whether to accept the user or not. -- Fajar
Ok, I try. Thanks, Roberta -----Original Message----- From: freeradius-users-bounces+roberta.maglione=telecomitalia.it@lists.freeradius.org [mailto:freeradius-users-bounces+roberta.maglione=telecomitalia.it@lists.freeradius.org] On Behalf Of Alan DeKok Sent: mercoledì 25 maggio 2011 10.47 To: FreeRadius users mailing list Subject: Re: Radius proxy configuration Maglione Roberta wrote:
Thanks for the clarification and sorry for the basic question. I'm new on this list and I was trying to understand if I can achieve with freeradius a behavior similar to what could be done with another product (navisradius) by setting Radius-CopyMode. In navisradius Radius-CopyMode specifies that after forwarding the request to the remote RADIUS server processing automatically continues with the method. NavisRadius will not wait for a response from the remote server and any response received is discarded.
See http://git.freeradius.org. Grab the "v2.1.x" branch, and look at raddb/modules/replicate. You will need to do "configure --with-experimental-modules" Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie. This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.
participants (3)
-
Alan DeKok -
Fajar A. Nugraha -
Maglione Roberta