Proxy question

Roberto Greiner mrgreiner at gmail.com
Fri Oct 6 16:06:00 CEST 2006


Hy,

I'm having a small problem with the proxy.conf file.

I added the following entry to proxy.conf:

realm test.com{
        type            = radius
        authhost        = LOCAL
        accthost        = LOCAL
        secret          = foobar
        strip
        }

But when I send a user with the test.com domain, it wasn't stripped. The
radiusd -X log below shows the behavior:

  modcall[authorize]: module "mschap" returns noop for request 0
    rlm_realm: Looking up realm "test.com" for User-Name =
"rgreiner at test.com"
    rlm_realm: Found realm "test.com"
    rlm_realm: Adding Stripped-User-Name = "rgreiner"
    rlm_realm: Proxying request from user rgreiner to realm test.com
    rlm_realm: Adding Realm = "test.com"
    rlm_realm: Authentication realm is LOCAL.
  modcall[authorize]: module "suffix" returns noop for request 0
  modcall[authorize]: module "files" returns notfound for request 0
radius_xlat:  'rgreiner at test.com'

I've tried removing the realm LOCAL entry from proxy.conf, without
result. The realm DEFAULT with authhost = LOCAL or = localhost didn't
solve either. The only way I managed to get this to work was to write

realm test.com {
    authhost = a.b.c.d
    .....
}

With a.b.c.d being the local server's real IP (not the localhost IP). Is
that the proper way to do it or am I missing something?

Thank you,

Roberto

-- 
 ------------------------------------------------------------------- 
|                     Marcos Roberto Greiner                        | 
|                                                                   | 
|         Os otimistas acham que estamos no melhor dos mundos       | 
|         Os pessimistas tem medo de que isto seja verdade          | 
|                                                     Murphy        | 
 ------------------------------------------------------------------- 
|                         rgreiner at usp.br                           | 
 -------------------------------------------------------------------




More information about the Freeradius-Users mailing list