Problems with my radrelay configuration?

Fajar A. Nugraha list at fajar.net
Mon Oct 17 14:45:59 CEST 2011


On Mon, Oct 17, 2011 at 6:42 PM, tonimanel
<antoniofernandez at fabergames.com> wrote:
> Thank you for your answer. I am going to follow this guide. I think that
> there are some points that maybe it isn't necessary for the objective.
>
> I can tell you that:
> 1.- I thought that the achieve of this configuration was to have two
> services with authentication and accounting data synchronized.

... and there you have it, your FIRST main problem. You don't
understand what it does. You still mention authentication. This
configuration does NOTHING to synchronize authentication data. With
this configuration, you need to synchronize user data (for
authentication) separately, with an external mechanism.

> First service
> writes in database and in detail file and second service would make the same
> and both would read from detail file and then write to database.

only accounting records get written in file/database. Again, nothing
about authentication.

> 2.- Yes, I think the same. Great phrase. ;)
> 2.1- I have configured a simple freeradius, logging with database, with nas
> and writting account data in database too. I don't know if getting this,
> data would write in detail file or not.
> 2.2- I don't know how to get that service writes records into detail file.

It was mentioned many times as answer to your question. Go back, read
the archive. Do NOT go any further until you can write accounting
records to a detail file.

> 2.3- I have used "Radius test client" to test the authentication and
> accounting processes. Not more.

What radius test client? radtest? radclient?

Have you verified that the authentication process work? Have you
verified that the accounting record gets written? Again, do NOT go any
further until you can write accouting records to a detail file.

> 2.4- I don't know how to read accounting records (because I don't know how
> to write it)

... and that is your SECOND main problem.

Re-read all the answers that's been given (open list archive if necessary).

Do NOT go any further until you can write accouting records to a detail file.
(probably I sound like a broken record by now, but that seems to be
necessary in this case).

-- 
Fajar



More information about the Freeradius-Users mailing list