Rejected proxy requests not making it to the client

Arran Cudbard-Bell a.cudbardb at freeradius.org
Wed Jul 3 18:28:21 CEST 2013


On 3 Jul 2013, at 17:19, Ti Leggett <leggett at mcs.anl.gov> wrote:

> Ok. I'll be firing up gdb and adding more logging. Before I did that I added a post_proxy detail log to see what the proxy server saw in that phase and for Access-Rejected packets they never get to the post_proxy section. Not sure if that sheds any more light on this.
> 
> Anyway, so I know where to focus my debugging, I want to make sure I understand how a proxied packet makes its way through the system. Is the path:
> 
> authorize -> pre_proxy -> post_proxy
> 
> That's how it looks from the debug logs. Do the authenticate sections ever get hit? 

That's the correct flow. 

authorize -> pre-proxy -> post-proxy -> post-auth

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team



More information about the Freeradius-Users mailing list