3.0.2 / possible bug when proxying with no response from home server

Chaigneau, Nicolas nicolas.chaigneau at capgemini.com
Tue Apr 1 09:15:12 CEST 2014


Thanks for the fix!



I still have a question, though.

Now, the request goes through:

- authorize
- pre-proxy
(no response from proxy server)
- Post-Auth-Type REJECT

It does *not* go through "Post-Proxy-Type Fail" anymore.
Is that the expected behaviour ?


If it is, this contradicts the comments in the "default" site example (copied below).
If these are not accurate anymore, they probably need to be edited.

	
	#  If the server tries to proxy a request and fails, then the
	#  request is processed through the modules in this section.
	#
	#  The main use of this section is to permit robust proxying
	#  of accounting packets.  The server can be configured to
	#  proxy accounting packets as part of normal processing.
	#  Then, if the home server goes down, accounting packets can
	#  be logged to a local "detail" file, for processing with
	#  radrelay.  When the home server comes back up, radrelay
	#  will read the detail file, and send the packets to the
	#  home server.
	#
	#  With this configuration, the server always responds to
	#  Accounting-Requests from the NAS, but only writes
	#  accounting packets to disk if the home server is down.
	#
#	Post-Proxy-Type Fail {
#			detail
#	}




> -----Message d'origine-----
> De : freeradius-users-
> bounces+nicolas.chaigneau=capgemini.com at lists.freeradius.org
> [mailto:freeradius-users-
> bounces+nicolas.chaigneau=capgemini.com at lists.freeradius.org] De la
> part de Alan DeKok
> Envoyé : lundi 31 mars 2014 16:54
> À : FreeRadius users mailing list
> Objet : Re: 3.0.2 / possible bug when proxying with no response from
> home server
> 
> Chaigneau, Nicolas wrote:
> > Is this a bug, or a configuration issue ?
> 
>   Bug.  I've pushed a fix.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.



More information about the Freeradius-Users mailing list