Problem with proxy-radius function

banga man_gust at yahoo.com
Fri Apr 11 10:51:26 CEST 2008


AnyOne?

Error: Rejecting request 20696 due to lack of any response from home server
X.X.X.X port 1646
Error: Ignoring request from unknown home server X.X.X.X port 1646  
How I can fix that ?


banga wrote:
> 
> Hello All. 
> I Use freeradius  2.0.3 only for accounting purpose. 
> More than that,  I have dozen realms that should be counted locally, and
> only one that should be proxed to redundant AAA servers. 
> My current configuration is the next:
>>cat clients.conf
> client test1 {                                                                                                                       
>         ipaddr = 192.168.100.1
>         secret          = somesecret                                                                                                      
>         shortname       = test1                                                                                                      
>         nastype     = other                                                                                                         
> }                                                                                                                                   
>                                                                                                                                     
> client test2 {                                                                                                                       
>         ipaddr = 192.168.100.2                                                                                                      
>         secret          = somesecret
>         shortname       = test2                                                                                                      
>         nastype     = other                                                                                                         
> }                                            
> 
> 
>>cat proxy.conf
> proxy server {                                                                                                                      
>         default_fallback = no                                                                                                       
> }                                                                                                                                   
>                                                                                                                                     
> home_server test1 {                                                                                                                  
>         type = acct                                                                                                                 
>         ipaddr = 192.168.100.1
>         port = 1646                                                                                                                 
>         secret = somesecret
>         status_check = request                                                                                                      
>         }                                                                                                                           
>                                                                                                                                     
> home_server test2 {                                                                                                                  
>         type = acct                                                                                                                 
>         ipaddr = 192.168.100.2
>         port = 1646                                                                                                                 
>         secret = somesecret
>         status_check = request                                                                                                      
>         }                                                                                                                           
>                                                                                                                                     
> home_server_pool test {                                                                                                              
>         type = fail-over                                                                                                            
>         home_server = test1                                                                                                          
>         home_server = test2                                                                                                          
>         }                                                                                                                           
>                                                                                                                                     
> realm dialup.domain.com {                                                                                                                 
>         acct_pool = test                                                                                                             
>         nostrip                                                                                                                     
>         }                                                                                                                           
>     >cat default
> preacct {                                                                                                                           
>         suffix                                                                                                                      
> }                                                                                                                                   
>                                                                                                                                     
> accounting {                                                                                                                        
>         acct_unique                                                                                                                 
>         sql                                                                                                                         
> } 
> 
> In case if radius work like daemon I can see next massages in the log
> (different time different):
> Error: Ignoring request from unknown home server 192.168.100.2 port 1646 
> Error: Rejecting request 2583 due to lack of any response from home server
> 192.168.100.2
> Error: Ignoring request from unknown home server 192.168.100.1 port 1646 
> Error: Rejecting request 2545 due to lack of any response from home server
> 192.168.100.1
> 
> In case if radiusd –X than I get Segmentation fault:
> 
> Like example:
> Rejecting request 602 due to lack of any response from home server
> 192.168.100.2 port 1646
> Finished request 602.
> Cleaning up request 602 ID 152 with timestamp +102
> Cleaning up request 602 ID 0 with timestamp +102
> Segmentation fault
> 
> 1) Why “unknown home server” ?  clients.conf has this IPs?
> 2) Why Segmentation faul on –X ? After hours of test I decide that it’s
> because of my configuration. (proxy.conf incorrect?)
> 3) Then I debug on realm that should accounting locally i can see the
> next:
> ++[acct_unique] returns ok
>     rlm_realm: Looking up realm "domain.com" for User-Name =
> "usera at domain.com"
>     rlm_realm: No such realm "domain.com"
> ++[suffix] returns noop
> +- entering group accounting
> ++[acct_unique] returns noop
> 
> Is it good idea to add next to proxy.conf or I do not need to do that ?
> 
> realm LOCAL {     
> accthost	= LOCAL                                                                                                                  
> }                                                                                                                                   
> realm NULL {                
> accthost	= LOCAL                                                                                                       
> }                                                                                                                                  
> 
> realm DEFAULT {         
> accthost	= LOCAL                                                                                                           
> }                                      
> 
> I case if it's good then should I define “=LOCAL” somewhere ? I mean why
> ”accthost = LOCAL” is correct and ”accthost = LOCALXXX”  not ?
> 
> Thanx.
> 

-- 
View this message in context: http://www.nabble.com/Problem-with-proxy-radius-function-tp16610498p16627270.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.





More information about the Freeradius-Users mailing list