eap-ttls proxy and ldap

Alan DeKok aland at deployingradius.com
Thu Mar 1 14:21:24 CET 2007


basile wrote:
> i don t want cancel proxying
> i m doing eap-ttls , and user with realm @etab1 have to be proxied to
> another radius
> server ,

  Just configure the realm on the server that's doing the proxying.  The
requests will then be proxied.

  After that, configure the home server to authenticate users.  This is
independent of proxying.

> proxy works fine but authentication is done with anonymous
> witch don t work
> the first server don t send good username

  The first server just proxies whatever the client sends it.  You said
that's what you wanted/

> logs on the second  server ( end server )
> 
> rad_recv: Access-Request packet from host xxx:1814, id=0, length=168
>         User-Name = "anonymous"

  Set "striprealm = no" on the server that is doing the proxying.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog



More information about the Freeradius-Users mailing list