Freeradius2 and proxing
Vincent Magnin
Vincent.Magnin at unil.ch
Thu Feb 7 14:31:56 CET 2008
Well,
I've writen a patch for realms.c and now, I've a better behaviour:
rlm_realm: Looking up realm "extern.realm.com" for User-Name =
"anonymous at extern.realm.com"
rlm_realm: Found realm "DEFAULT"
rlm_realm: Proxying request from user anonymous to realm DEFAULT
rlm_realm: Adding Realm = "DEFAULT"
rlm_realm: Preparing to proxy authentication request to realm "DEFAULT"
Does exist a better way to use the DEFAULT realm?
Regards,
Vincent Magnin
Vincent Magnin <Vincent.Magnin at unil.ch> a écrit :
> In freeradius 1, if I need to proxy requests whose realm are remote,
> I put the following in proxy.conf:
>
>> realm DEFAULT {
>> type = radius
>> authhost = remote.server1.com:1812
>> accthost = remote.server1.com:1813
>> secret = ****************
>> ldflag = round_robin
>> nostrip }
>>
>> realm DEFAULT {
>> type = radius
>> authhost = remote.server2.com:1812
>> accthost = remote.server2.com:1813
>> secret = ****************
>> ldflag = round_robin
>> nostrip
>> }
>
>
> I've tried to put the same lines in my freeradius2 config file and it
> does not work as expected:
>
> radius -X output:
>
> rlm_realm: Looking up realm "extern.realm.com" for User-Name =
> "anonymous at extern.realm.com"
> rlm_realm: No such realm "extern.realm.com"
>
> Then, the request is done locally.
>
>
> If I put in my proxy.conf file this domain explicitely, it works fine:
>
>
>> realm extern.realm.com {
>> type = radius
>> authhost = remote.server2.com:1812
>> accthost = remote.server2.com:1813
>> secret = ****************
>> ldflag = round_robin
>> nostrip
>> }
>
> radius -X output:
>
> rlm_realm: Looking up realm "extern.realm.com" for User-Name =
> "anonymous at extern.realm.com"
> rlm_realm: Found realm "extern.realm.com"
> rlm_realm: Proxying request from user anonymous to realm extern.realm.com
> rlm_realm: Adding Realm = "extern.realm.com"
> rlm_realm: Preparing to proxy accounting request to realm
> "extern.realm.com"
Switzerland
-------------- next part --------------
A non-text attachment was scrubbed...
Name: realms.diff
Type: text/x-patch
Size: 596 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20080207/d71eb6c6/attachment.bin>
More information about the Freeradius-Users
mailing list