Proxying doesn't work!

[Kostas Zorbadelos]

On Wed, Jul 11, 2007 at 09:22:32AM +0200, Federico Giannici wrote:
> We have a working FreeRADIUS 1.1.4 running since a lot of months.
> Now we have to proxy the requests for a realm (gtenet.it) to a given 
> RADIUS server, but our server seems to ignore the proxy configuration!
> 
> I have set "proxy_requests = yes" and included the "proxy.conf" file 
> (I'm sure of these, looked at the debug output).
> 
> Here it is our "proxy.conf" file:
> 
> proxy server {
> 	synchronous = no
> 	retry_delay = 5
> 	retry_count = 3
> 	dead_time = 120
> 	default_fallback = yes
> 	post_proxy_authorize = no
> }
> realm gtenet.it {
> 	type        = radius
> 	authhost    = 195.103.212.53:1645
> 	accthost    = 195.103.212.53:1646
> 	secret      = XXXXXXXXX
> }
> 
> When a request for xxxx at gtenet.it is received, it goes through the 
> authorization and then instead of being proxied it goes through 
> authentication and obviously fail!
> 

You need to uncomment the "suffix" module in the authorize section. 

> Here it is the output of the server in debug mode:
> 
> Jul 10 18:55:29 aragorn radiusd[23262]: Going to the next request
> Jul 10 18:55:29 aragorn radiusd[23262]: Waking up in 6 seconds...
> Jul 10 18:55:29 aragorn radiusd[23262]: rad_lowerpair:  User-Name now 
> 'neomedia at gtenet.it'
> Jul 10 18:55:29 aragorn radiusd[23262]: rad_lowerpair:  User-Password 
> now 'XXXXXXXX'
> Jul 10 18:55:29 aragorn radiusd[23262]: rad_rmspace_pair:  User-Name now 
> 'neomedia at gtenet.it'
> Jul 10 18:55:29 aragorn radiusd[23262]: rad_rmspace_pair:  User-Password 
> now 'XXXXXXXX'
> Jul 10 18:55:29 aragorn radiusd[23262]:   Processing the authorize 
> section of radiusd.conf
> Jul 10 18:55:29 aragorn radiusd[23262]: modcall: entering group 
> authorize for request 72
> Jul 10 18:55:29 aragorn radiusd[23262]:   modcall[authorize]: module 
> "preprocess" returns ok for request 72
> Jul 10 18:55:29 aragorn radiusd[23262]:   modcall[authorize]: module 
> "nm" returns noop for request 72
^^^^^^^^^

I don't know this module. Have you named an instance of a known module
this way?

> Jul 10 18:55:29 aragorn radiusd[23262]:   modcall[authorize]: module 
> "chap" returns noop for request 72
> Jul 10 18:55:29 aragorn radiusd[23262]:   modcall[authorize]: module 
> "mschap" returns noop for request 72
> Jul 10 18:55:29 aragorn radiusd[23262]: rlm_pap: WARNING! No "known 
> good" password found for the user.  Authentication may fail because of this.
> Jul 10 18:55:29 aragorn radiusd[23262]:   modcall[authorize]: module 
> "pap" returns noop for request 72
> Jul 10 18:55:29 aragorn radiusd[23262]: modcall: leaving group authorize 
> (returns ok) for request 72
> Jul 10 18:55:29 aragorn radiusd[23262]: auth: No authenticate method 
> (Auth-Type) configuration found for the request: Rejecting the user
> Jul 10 18:55:29 aragorn radiusd[23262]: auth: Failed to validate the user.
> 
> Any hints of what could be the problem?
> 
> 
> Thanks.
> 
> -- 
> ___________________________________________________
>      __
>     |-                      giannici at neomedia.it
>     |ederico Giannici      http://www.neomedia.it
> ___________________________________________________
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>