Problem with proxying accounting packets on FR 2.1.3
    Patric 
    patricrt at gmail.com
       
    Wed Sep 23 11:40:58 CEST 2009
    
    
  
Hi all,
I hope I can explain this clearly and concisely :)
I have 2 freeradius servers:
Primary:   freeradius 1.1.6 (I know, its old, busy trying to get issues 
resolved so that I can update...)
Secondary: freeradius 2.1.3
I have radrelay proxying accounting packets from the primary to the 
secondary which appears to be working fine.
I am trying to get the secondary to proxy accounting requests to the 
primary as well, but there seems to be some trouble.
It *appears* that the secondary is receiving proxy updates from the 
primary, applying them, and then proxying them back to the primary.
I eventually noticed that the secondary is not adding the 
Client-IP-Address to incoming requests (I found the posts in the archive 
mentioning that this is normal and is no longer done in FR2). So I 
suspect the primary is sending the update to the secondary, the 
secondary is applying it and sending it back instead of stopping there.
My question is: How do I get the secondary to realize it must not send 
the proxied request back again.
I include my secondary config in case ive munged it somewhere. Any 
pointers would be very much appreciated!
Freeradius 2.1.3
radiusd.conf
------------
proxy_requests  = yes
$INCLUDE proxy.conf
proxy.conf
----------
proxy server {
        default_fallback = no
}
home_server copy-acct-to-home-server {
        type = acct
        ipaddr = ip_of_primary_server
        port = 1813
        secret = shared_secret
        response_window = 20
        zombie_period = 40
        revive_interval = 120
}
home_server_pool my_acct_failover {
        home_server = copy-acct-to-home-server
}
realm DEFAULT {
        acct_pool       = my_acct_failover
        nostrip
}
sites-enabled/default
---------------------
authorize {
        preprocess
        files
        exec-radauth # custom authorization...
}
authenticate {
}
preacct {
        preprocess
        acct_unique
}
accounting {
        detail
        detail-radrelay
        sql
}
pre-proxy {
}
post-proxy {
}
sites-enabled/copy-acct-to-home-server
--------------------------------------
server copy-acct-to-home-server {
        listen {
                type = detail
                filename = ${radacctdir}/detail-combined
                load_factor = 10
        }
        preacct {
                suffix
        }
        accounting {
                   ok
        }
I have tried include all relevant info but please advise if anything 
further is required.
Many many thanks as always
Patric
    
    
More information about the Freeradius-Users
mailing list