Server switch

Emmanuel BILLOT emmanuel.billot at ac-orleans-tours.fr
Tue Mar 26 14:24:21 CET 2013


> Set up proxy.conf with entries for the right ports, then you
> should be able to do something like (example, untested):
>
> authorize {
>
>    if (Calling-Station-Id =~ /^.*:([a-zA-Z]+)$/) {
>      update control {
>        Tmp-String-0 := %{1}
>      }
>    }
>    
>    switch "%{Tmp-String-0}" {
>      case 'TEST' {
>         update control {
>            Proxy-To-Realm := testproxy
>         }
>      }
>      case 'WIFI' {
>         update control {
>            Proxy-To-Realm := wifiproxy
>         }
>      }
>      ...
>    }
>
> }
>
> This should work between different servers; I'm not sure if you'll
> hit the "only one internal proxy" limit on one server.
>
> Matthew
>
>
Using a wide filter capture i get

rad_recv: Access-Request packet from host 172.23.255.199 port 56097, 
id=53, length=232
         User-Name = "nagios at ac-orleans-tours.fr"
         Calling-Station-Id = "8C-77-12-53-62-0E"
         NAS-IP-Address = 172.23.255.199
         NAS-Port = 16
         Called-Station-Id = "C0-8A-DE-FA-E9-58:WIFI-ACAD"
         Service-Type = Framed-User
         Framed-MTU = 1400
         NAS-Port-Type = Wireless-802.11
         NAS-Identifier = "C0-8A-DE-FA-E9-58"
         Connect-Info = "CONNECT 802.11g/n"
         EAP-Message = 
0x0200001f016e6167696f734061632d6f726c65616e732d746f7572732e6672
         Vendor-25053-Attr-3 = 0x574946492d41434144
         Message-Authenticator = 0xc6f0db77bf6435b74051b3b3db278ca3
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
++? if (Called-Station-Id =~ /^.*:(.*)$/)
? Evaluating (Called-Station-Id =~ /^.*:(.*)$/) -> TRUE
++? if (Called-Station-Id =~ /^.*:(.*)$/) -> TRUE
++- entering if (Called-Station-Id =~ /^.*:(.*)$/) {...}
+++[control] returns notfound
++- if (Called-Station-Id =~ /^.*:(.*)$/) returns notfound
         expand: %{Tmp-String-0} ->
++- entering switch %{Tmp-String-0} {...}
+++- switch %{Tmp-String-0} returns notfound
++- group authorize returns notfound
ERROR: No authenticate method (Auth-Type) found for the request: 
Rejecting the user
Failed to authenticate the user.
Using Post-Auth-Type Reject



More information about the Freeradius-Users mailing list