Rejected proxy requests not making it to the client
Alan DeKok
aland at deployingradius.com
Wed Jul 3 23:14:46 CEST 2013
Ti Leggett wrote:
> Ok. I'll be firing up gdb and adding more logging. Before I did that I added a post_proxy detail log to see what the proxy server saw in that phase and for Access-Rejected packets they never get to the post_proxy section.
I'm not sure how that happens. The proxy reply is *immediately*
processed through the post_proxy section.
> Not sure if that sheds any more light on this.
>
> Anyway, so I know where to focus my debugging, I want to make sure I understand how a proxied packet makes its way through the system. Is the path:
>
> authorize -> pre_proxy -> post_proxy
>
> That's how it looks from the debug logs. Do the authenticate sections ever get hit? Any other sections I should look into?
No. See src/main/event.c. It's complicated, but there aren't many
references to processing the proxy reply.
Alan DeKok.
More information about the Freeradius-Users
mailing list