FreeRADIUS and RSA RADIUS Server

Jakub Morávek jakub.moravek at gmail.com
Tue Feb 5 13:50:08 CET 2008


Hello,
   I have not many experiences with radius, so my question may be stupid.
Has anybody experience with using freeradius (Version 1.1.3 in Debian Sarge)
as proxy for RSA RADIUS Server included in RSA Authentication Manager 6.1? I
need to solve following problem with the "Agent host" i.e. host which send
authenticate request to RSA Auth Manager.

When authentication request goest through freeradius proxy, RSA Manager
thinks that Agent host is my freeradius proxy instead of original host which
sent authenticate request. Below is pasted part of pre-proxy detail log and
debug log.

part of output from: freeradius -X:

Sending Access-Request of id 0 to 10.100.25.2 port 1812
        User-Name = "jakub"
        User-Password = "1234628665"
        NAS-IP-Address = 127.0.1.1
        NAS-Identifier = "ssh"
        NAS-Port = 21704
        NAS-Port-Type = Virtual
        Service-Type = Authenticate-Only
        Calling-Station-Id = "10.5.0.39"
        Proxy-State = 0x313039

output of /var/log/freeradius/radacct/10.5.0.31/pre-proxy-detail-20080204:

Packet-Type = Access-Request
Mon Feb  4 23:55:50 2008
        User-Name = "jakub"
        User-Password = "1234628665"
        NAS-IP-Address = 127.0.1.1
        NAS-Identifier = "ssh"
        NAS-Port = 21704
        NAS-Port-Type = Virtual
        Service-Type = Authenticate-Only
        Calling-Station-Id = "10.5.0.39"
        Client-IP-Address = 10.5.0.31
        Stripped-User-Name = "jakub"
        Realm = "NULL"
        Realm = "NULL"
        Proxy-State = 0x313039

Does this mean, that freeradius process all attributes from
pre-proxy-detail-20080204 log, but sends only attributes, which are shown in
extended debug mode? If so, can anybody give me any advice how can I
configure freeradius to send more attributes?

   Jakub
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080205/c0e694e8/attachment.html>


More information about the Freeradius-Users mailing list