FreeRadius going through ISA to reach federation

[Phil Mayers]

On 16/12/11 14:29, Rui Ribeiro wrote:
> Hi all,
>
> I have configuring a FreeRadius, and I need to go through a IAS to reach the

Ugh. Nasty. IAS as an eduroam proxy!

> eduroam federation. I created a realm for our local domain, created a
> DEFAULT proxy for users with other domains pointing to the IAS server, both
> are as clients of each other, share the same secret, and also defined a
> Remote access policy in IAS.
>
> Tried already some alternatives, and inserted Reply-Message = "Yes", as
> suggested on another post in the list.

Eh? Who suggested that?

>
> Despite all the efforts, when talking with the IAS, I receive back the error
> Proxy-State = 0x3137.

That's not an error; it's just a radius attribute.

>
> Any advice?

You will need to debug this on the IAS server, since it is sending (or 
proxying) the reject. My guess is the policies in IAS are wrong.