proxy implementation
Dear Friends, We have successfully implemented NAS <--> FreeRadius <--> IN However now we have to implement NAS <--> Proxy (auth + acct) <--> FreeRadius <--> IN Can you please help me on the same? When we tried, proxy server is giving below error message. 1. *Auth: Login incorrect: [newhostt@domainserver.com <testhost@server.com>] (from client 222.222.222.90 port 16634 cli 3455534333)* Proxy server is trying to validate the user however as per my understanding, it has to forward to home server instead of validating the user. Please let me know if you need any configuration files to be uploaded, I will send the same in the email. 1. Proxy server does not obtain persistent connection to home servers and the connection is only when it forwards request (auth or act) home server. Is our understanding correct? because We are doubt that proxy server is connecting to home server or not. -- Regards, Srithar Durairaj Alternate Mail I.D: srijeevadurai1@yahoo.co.in Mobile: +919886251852
On Wed, Jan 06, 2016 at 06:17:35PM +0530, srithar jeevadurai wrote:
Can you please help me on the same? When we tried, proxy server is giving below error message.
1. *Auth: Login incorrect: [newhostt@domainserver.com <testhost@server.com>] (from client 222.222.222.90 port 16634 cli 3455534333)*
You've asked this a few times. What do the full debug logs (radiusd -X) say?
Proxy server is trying to validate the user however as per my understanding, it has to forward to home server instead of validating the user. Please let me know if you need any configuration files to be uploaded, I will send the same in the email.
Full debug output, not config file. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Hi Matthew, I run the proxy radius with -X mode and got below error message. ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. *Auth: Login incorrect: [user@abc.com <user@abc.com>] (from client 222.222.222.90 port 16679 cli 3455454534)* NAS simulator (I am sending request as below from NAS simulator): authreq="User-Name=user@abc.com,*User-Password=password* ,Calling-Station-Id=....." echo "$authreq" | ../radclient 222.222.222.90:1812 <http://222.222.222.117:1812/> auth testing123 Is it something related to configuration? I have provided password in User-Password i.e. On Wed, Jan 6, 2016 at 7:14 PM, Matthew Newton <mcn4@leicester.ac.uk> wrote:
On Wed, Jan 06, 2016 at 06:17:35PM +0530, srithar jeevadurai wrote:
Can you please help me on the same? When we tried, proxy server is giving below error message.
1. *Auth: Login incorrect: [newhostt@domainserver.com <testhost@server.com>] (from client 222.222.222.90 port 16634 cli 3455534333)*
You've asked this a few times.
What do the full debug logs (radiusd -X) say?
Proxy server is trying to validate the user however as per my understanding, it has to forward to home server instead of validating the user. Please let me know if you need any configuration files to be uploaded, I will send the same in the email.
Full debug output, not config file.
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Regards, Srithar Durairaj Alternate Mail I.D: srijeevadurai1@yahoo.co.in Mobile: +919886251852
On Thu, Jan 07, 2016 at 11:24:16AM +0530, srithar jeevadurai wrote:
I run the proxy radius with -X mode and got below error message.
ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. *Auth: Login incorrect: [user@abc.com <user@abc.com>] (from client 222.222.222.90 port 16679 cli 3455454534)*
That's not the full debug logs. We know you get that message. Follow the instructions on http://wiki.freeradius.org/config/Proxy and read http://wiki.freeradius.org/guide/Troubleshooting#reminder-run-the-server-in-...
NAS simulator (I am sending request as below from NAS simulator):
authreq="User-Name=user@abc.com,*User-Password=password* ,Calling-Station-Id=....." echo "$authreq" | ../radclient 222.222.222.90:1812 <http://222.222.222.117:1812/> auth testing123
Have you configured realms? suffix? etc. Nobody can tell without seeing the logs.
Is it something related to configuration?
Yes. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (2)
-
Matthew Newton -
srithar jeevadurai