Connecting two freeradius server ?

[Josh Howlett]

On 24 May 2006, at 08:46, Frank Bonnet wrote:

> Hello
>
> I use freeradius to authenticate Chillispot users using an Openldap
> backend , everything works like a charm :-)
>
> Another (friendly) site has quite the same configuration they do  
> use freeradius too
> to authenticate their wi-fi users.
>
> Both sites have a permanent Internet access.
>
> Now is it possible for "my" daemon to "communicate" with another  
> freeradius
> daemon which is running in another distant site to let all of our  
> users
> ( my site + distant site ) authenticate transparently with their  
> own site
> logins/passwds on the two sites ?

Yes, this is possible with "proxy" authentication. You allocate a  
'realm' to each site (ie. 'franksite'), and users (typically) append  
the realm to their username in the format <username>@<realm> (ie.  
'frank at franksite'). Take a look at proxy.conf, and google for  
"freeradius proxy".

josh.

Josh Howlett, Networking Specialist, University of Bristol.
email: josh.howlett at bristol.ac.uk | phone: +44 (0)7867 907076 |  
interal: 7850