Problem with proxy-radius function
banga
man_gust at yahoo.com
Thu Apr 10 19:11:40 CEST 2008
Hello All.
I Use freeradius 2.0.3 only for accounting purpose.
More than that, I have dozen realms that should be counted locally, and
only one that should be proxed to redundant AAA servers.
My current configuration is the next:
>cat clients.conf
client test1 {
ipaddr = 192.168.100.1
secret = somesecret
shortname = test1
nastype = other
}
client test2 {
ipaddr = 192.168.100.2
secret = somesecret
shortname = test2
nastype = other
}
>cat proxy.conf
proxy server {
default_fallback = no
}
home_server test1 {
type = acct
ipaddr = 192.168.100.1
port = 1646
secret = somesecret
status_check = request
}
home_server test2 {
type = acct
ipaddr = 192.168.100.2
port = 1646
secret = somesecret
status_check = request
}
home_server_pool test {
type = fail-over
home_server = test1
home_server = test2
}
realm dialup.domain.com {
acct_pool = test
nostrip
}
>cat default
preacct {
suffix
}
accounting {
acct_unique
sql
}
In case if radius work like daemon I can see next massages in the log
(different time different):
Error: Ignoring request from unknown home server 192.168.100.2 port 1646
Error: Rejecting request 2583 due to lack of any response from home server
192.168.100.2
Error: Ignoring request from unknown home server 192.168.100.1 port 1646
Error: Rejecting request 2545 due to lack of any response from home server
192.168.100.1
In case if radiusd –X than I get Segmentation fault:
Like example:
Rejecting request 602 due to lack of any response from home server
192.168.100.2 port 1646
Finished request 602.
Cleaning up request 602 ID 152 with timestamp +102
Cleaning up request 602 ID 0 with timestamp +102
Segmentation fault
1) Why “unknown home server” ? clients.conf has this IPs?
2) Why Segmentation faul on –X ? After hours of test I decide that it’s
because of my configuration. (proxy.conf incorrect?)
3) Then I debug on realm that should accounting locally i can see the next:
++[acct_unique] returns ok
rlm_realm: Looking up realm "domain.com" for User-Name =
"usera at domain.com"
rlm_realm: No such realm "domain.com"
++[suffix] returns noop
+- entering group accounting
++[acct_unique] returns noop
Is it good idea to add next to proxy.conf or I do not need to do that ?
realm LOCAL {
accthost = LOCAL
}
realm NULL {
accthost = LOCAL
}
realm DEFAULT {
accthost = LOCAL
}
I case if it's good then should I define “=LOCAL” somewhere ? I mean why
”accthost = LOCAL” is correct and ”accthost = LOCALXXX” not ?
Thanx.
--
View this message in context: http://www.nabble.com/Problem-with-proxy-radius-function-tp16610498p16610498.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
More information about the Freeradius-Users
mailing list