simple accounting proxy setup.

Bill Schoolfield bill at billmax.com
Tue Oct 2 20:58:59 CEST 2012


I removed this line. Started up the server and I can see that the
packets are being sent to the other server. However. I get...

> Detail listener /var/log/radius/radacct/relay-detail state running signalled 0 waiting 1.094676 sec
> Waking up in 0.9 seconds.
> rad_recv: Accounting-Request packet from host 192.168.111.55 port 1814, id=54, length=278
> Received Accounting-Request packet from client 192.168.111.55 with invalid signature!  (Shared secret is incorrect.) Dropping packet without response.
> Going to the next request

so the shared secret is wrong. But I have checked the secret on both
sides and it is the same. What else could it be? I'm a little
unclear on the remote server's client entry for this relay. Should
it be the ip of the freeradius server or should it match the ip of
the originating NAS? I have set up both to no avail.

Bill

On 10/2/2012 12:27 PM, Bill Schoolfield wrote:
> To be clear, remove the line below???
> 
> virtual_server = copy-acct-to-home-server
> 
> Does the "update control { Proxy-To-Realm := 'home_realm' }
> section handle this association for us?
> 
> Bill
> 
> 
> On 10/2/2012 12:19 PM, Matthew Newton wrote:
>> On Tue, Oct 02, 2012 at 11:37:31AM -0500, Bill Schoolfield wrote:
>>> Here is what I added in proxy.conf:
>> ...
>>> home_server_pool poolit {
>>>         home_server = myhomeserver
>>>         virtual_server = copy-acct-to-home-server
>>
>>
>> Remove the above line. Apart from that, looks OK to me.
>>
>> Matthew
>>
>>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 


More information about the Freeradius-Users mailing list