Query on UDP proxy socket using freeradius version 3.0.16
saurabha badhai
saurabha.badhai at gmail.com
Tue Jun 20 05:25:12 UTC 2023
Thanks to all for answering my questions. I found the information after
going through the source code. Will post query with details if any doubt.
Thanks,
Saurabha
On Sat, Jun 17, 2023 at 12:14 AM Alan DeKok <aland at deployingradius.com>
wrote:
> On Jun 16, 2023, at 1:40 PM, saurabha badhai <saurabha.badhai at gmail.com>
> wrote:
> > freeradius <-> loadbalancer <-> AAA
>
> That doesn't make much sense. But at this point, I'm not surprised.
> Every message has new / different information. Which means it's very
> difficult to help you.
>
> > Based on proxy udp src port load balancer map the request to a AAA, so
> if a
> > src port is mapped to AAA1 for few initial access request and
> > access-challenge before accept, if next request get proxied with a new
> src
> > port then load balancer sends to a different AAA, may be AAA2 which
> reject
> > it.
>
> The load balancer is broken. It doesn't do RADIUS properly.
>
> > Because of freeradius udp port change request get rejected.
>
> No.
>
> The request gets rejected for a different reason. The reason is in the
> FreeRADIUS logs.
>
> > That's why I asked this query ita related to freeradius.
>
> So you didn't describe what is *actually* happening until about 5
> messages in. The previous messages all asked unrelated / irrelevant
> questions which were unrelated to the actual issue.
>
> And when FreeRADUS rejects the request, it gives the reason.
>
> All of this nonsense could have been avoided if you had (a) posted the
> debug log as suggested by ALL OF THE DOCUMENTATION and (b) given a clear
> description of the problem in the first message.
>
> Instead, you put a lot of effort into doing things which are completely
> useless.
>
> This isn't a FreeRADIUS problem. The load balancer is broken.
>
> If you're going to continue asking questions, then you need to post
> questions *only* about FreeRADIUS, and also *include the debug output* as
> suggested by all of the documentation.
>
> Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/devel.html
>
More information about the Freeradius-Devel
mailing list