Copy of accounting packets
Alexandre Chapellon
alexandre.chapellon at mana.pf
Thu Aug 27 22:01:29 CEST 2009
You have defined your 2 home server in a single pool
Unfortunately, home_server_pool are only of type fail-over (packet sent
to the second server *ONLY* if first fails) or load-balance (differents
flavours) but not type allow for acct packet to be sent to both server.
You must use detail-file and detail listener vhost (check the sample
vhost config copy-acct-to-home-server ).
Le jeudi 27 août 2009 à 21:28 +0200, kokkola at anonymizer.cz a écrit :
> Hello.
>
> I am trying to setup FreeRadius server so it proxies all requests to
> Server1 and also sends copy of accounting packets to Server2.
> Proxying is working fine, but I cant get the copy-acct-to-home-server
> function to work.
>
> At the moment, authentication works fine, but accounting packets gets
> only to Server2.
>
> Any idea what I do wrong ?
>
> Thanks in advance for any help, its appreciated.
>
> ---
> Server log
> ---
>
> Polling for detail file /var/log/radius/radacct/detail
> detail_recv: Renaming /var/log/radius/radacct/detail ->
> /var/log/radius/radacct/detail.work
> detail_recv: Read packet from /var/log/radius/radacct/detail.work
> Acct-Session-Id = "6000006B"
> User-Name = "xxx"
> NAS-Port-Type = Ethernet
> Acct-Status-Type = Start
> Acct-Delay-Time = 1
> NAS-IP-Address = x.x.x.x
> Acct-Unique-Session-Id = "3abb2fc097796361"
> Stripped-User-Name = "xxx"
> Realm = "DEFAULT"
> Packet-Original-Timestamp = "Aug 26 2009 00:27:37 EDT"
> server copy-acct-to-home-server {
> +- entering group preacct {...}
> ++[preprocess] returns ok
> [suffix] Request already proxied. Ignoring.
> ++[suffix] returns ok
> +- entering group accounting {...}
> ++[ok] returns ok
> } # server copy-acct-to-home-server
> Finished request 1.
> Cleaning up request 1 ID 24938 with timestamp +6
> Going to the next request
> Waking up in 1.0 seconds.
>
> ---
> proxy.conf
> ---
>
> proxy server {
> default_fallback = yes
> }
>
> home_server acct_server1 {
> type = acct
> port = 1813
> ipaddr = x.x.x.x
> secret = xxxx
> }
>
> home_server acct_server2 {
> type = acct
> port = 1813
> ipaddr = x.x.x.x
> secret = xxxx
> }
>
> home_server_pool my_acct_pool {
> home_server = acct_server1
> home_server = acct_server2
> }
>
> realm DEFAULT {
> type = radius
> authhost = server1:1812
> accthost = server1:1813
> acct_pool = my_acct_pool
> secret = xxxx
> }
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20090827/24e475d0/attachment.html>
More information about the Freeradius-Users
mailing list