how to configure

tnt at kalik.co.yu tnt at kalik.co.yu
Thu Apr 19 13:06:45 CEST 2007


You already have those files. What you need to do (if you really want
help on this list) is to paste the output from radiusd -X so people can
see what has gone wrong and tell you how to fix it. "freeradius reject
the packets" can mean loads of things.

Ivan Kalik
Kalik Informatika ISP


Dana 19/4/2007, "parfait nda" <ndaparfait at hotmail.fr> piše:

>
>it's true! i had configure my FreeRADIUS server as a client on the IAS box, 
>but my server freeradius which i need it toi be server proxy don't transmit 
>the request of my switch. when i learned freeradius, i begun it by 
>configurate it with users file, and after with MySQL database.  then i want 
>to configure it to proxy server which can retransmit request to IAS on 
>windows server 2003.
>i don't want my freeradius do authentication, i want it proxy server.
>i have find some informations on that not be true. for the commande radiusd 
>-X  he wrote ready to process requests, and when i do my test my freeradius 
>reject the packets.
>i need configurations files(radiusd.conf, proxy.conf, clients.conf ...) to 
>tranformate it at proxy server.
>i use freeradius with eap-MD5, Switch cysco catalyst 2950, and windows 
>server 2003.
>thanks for your help!
>
>>From: Stefan Winter <stefan.winter at restena.lu>
>>Reply-To: FreeRadius users mailing list 
>><freeradius-users at lists.freeradius.org>
>>To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
>>Subject: Re: how to configure
>>Date: Thu, 19 Apr 2007 10:54:38 +0200
>>
>> > i need to configure my freeradius server in proxy server to use it with
>> > windows IAS! i want the configuration of the files of freeradius which 
>>can
>> > permit me to do that!
>>
>>We all want lots of things. Asking a bit more polite might help.
>>
>> > my last coonfiguration  of these files is:
>> >
>> > radiusd.conf
>> > proxy_request = yes
>> >
>> > proxy.conf
>> > realm gie.local {
>> >                     type     =  radius
>> >                     authhost =  LOCAL
>> >                     accthost  =  LOCAL
>> >                     }
>> >
>> > realm DEFAULT {
>> >                       type     =  radius
>> >                       authhost =  araignee.gie.local:1812
>> >                       accthost  =  araignee.gie.local:1813
>> >                       secret     =  parfait
>> >                       nostrip
>> >                       }
>> >
>> > Clients.conf
>> > client 192.168.0.2 {
>> >                            secret = parfait
>> >                            shortname  = araignee.gie.local
>> >                            }
>>
>>This snippet of config looks good, under the assumption that
>>araignee.gie.local is resolvable on your DNS server and resolves to IP
>>192.168.0.2.
>>
>>Now, configure your FreeRADIUS server as a client on the IAS box so that 
>>IAS
>>accepts the proxied requests, and, if appliable open the required firewall
>>ports.
>>
>>BTW: do you actually have a _problem_? Nothing in your mail tells us where
>>things don't work. The general, several-years-old and well-documented rule
>>here is: post the debug output of radiusd -X if you hae a problem. It will
>>help people here figure out the problem.
>>
>>Stefan
>>
>>--
>>Stefan WINTER
>>
>>Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de
>>la Recherche
>>Ingenieur Forschung & Entwicklung
>>
>>6, rue Richard Coudenhove-Kalergi
>>L-1359 Luxembourg
>>E-Mail:      Tel.:     +352 424409-1
>>http://www.restena.lu                Fax:      +352 422473
>
>
>><< attach4 >>
>
>
>
>
>>-
>>List info/subscribe/unsubscribe? See 
>>http://www.freeradius.org/list/users.html
>
>_________________________________________________________________
>Windows Live Spaces : créez votre blog ŕ votre image ! 
>http://www.windowslive.fr/spaces
>
>- 
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>




More information about the Freeradius-Users mailing list