proxying Access-Request Items (Attributes)

Orion Timbale timbaledorion at hotmail.com
Mon Oct 26 16:48:17 CET 2015


Thanks to all freeradius users!!!!


I'm using freeradius v3.0.4 under Fedora 22.
I try to proxy some Access-Request and add some check item/attribute
before proxying.
The radiusd -X output regarding this problem looks like this:

"Wed Oct 21 18:31:19 2015 : Debug: (0) # Executing section pre-proxy
from file /etc/raddb/sites-enabled/default
Wed Oct 21 18:31:19 2015 : Debug: (0)   pre-proxy {
Wed Oct 21 18:31:19 2015 : Debug: (0)   node.pre-proxy node.pre-proxy {
Wed Oct 21 18:31:19 2015 : Debug: (0)     if ("%{request:Packet-Type}"
== 'Access-Request')
Wed Oct 21 18:31:19 2015 : Debug: (0) EXPAND %{request:Packet-Type}
Wed Oct 21 18:31:19 2015 : Debug: (0)    --> Access-Request
Wed Oct 21 18:31:19 2015 : Debug: (0)     if ("%{request:Packet-Type}"
== 'Access-Request')   -> TRUE
Wed Oct 21 18:31:19 2015 : Debug: (0)    if ("%{request:Packet-Type}" ==
'Access-Request')   {
Wed Oct 21 18:31:19 2015 : Debug: (0)     update proxy-request {
Wed Oct 21 18:31:19 2015 : Debug: (0)   &NodeID == '0000000002'
Wed Oct 21 18:31:19 2015 : Debug: (0) No existing attribute to filter,
adding instead
Wed Oct 21 18:31:19 2015 : Debug: (0)     } # update proxy-request = noop
Wed Oct 21 18:31:19 2015 : Debug: (0)    } # if
("%{request:Packet-Type}" == 'Access-Request')   = noop
Wed Oct 21 18:31:19 2015 : Debug: (0)   } # byon-node.pre-proxy
byon-node.pre-proxy = noop
Wed Oct 21 18:31:19 2015 : Debug: (0)  } #  pre-proxy = noop
Wed Oct 21 18:31:19 2015 : Debug: (0) proxy: Trying to allocate ID (0/2)
Wed Oct 21 18:31:19 2015 : Debug: (0) proxy: Failed allocating ID:
Failed finding socket, caller must allocate a new one
Wed Oct 21 18:31:19 2015 : Debug: (0) proxy: Trying to open a new
listener to the home server
Wed Oct 21 18:31:19 2015 : Debug: Opening new proxy socket 'proxy
address * port 0'
Wed Oct 21 18:31:19 2015 : Debug: Listening on proxy address * port 45141
Wed Oct 21 18:31:19 2015 : Debug: (0) proxy: Trying to allocate ID (1/2)
Wed Oct 21 18:31:19 2015 : Debug: (0) proxy: request is now in proxy hash
Wed Oct 21 18:31:19 2015 : Debug: (0) proxy: allocating destination
192.168.42.193 port 1812 - Id 16
Wed Oct 21 18:31:19 2015 : Debug: (0) Proxying request to home server
192.168.42.193 port 1812 timeout 14.000000
Wed Oct 21 18:31:19 2015 : Debug: (0) Sending Access-Request packet to
host 192.168.42.193 port 1812, id=16, length=0
Wed Oct 21 18:31:19 2015 : Debug: (0)   User-Name =
'fname.lname at my-network.com'
Wed Oct 21 18:31:19 2015 : Debug: (0)   User-Password = 'passme'
Wed Oct 21 18:31:19 2015 : Debug: (0)   NAS-IP-Address = 127.0.0.1
Wed Oct 21 18:31:19 2015 : Debug: (0)   NAS-Port = 100
Wed Oct 21 18:31:19 2015 : Debug: (0)   Message-Authenticator =
0x29fc545638a7a1c6ec10b5f7e2c860c9
Wed Oct 21 18:31:19 2015 : Debug: (0)   Event-Timestamp = 'Oct 21 2015
18:31:19 CEST'
Wed Oct 21 18:31:19 2015 : Debug: (0)   Realm = 'DEFAULT'
Wed Oct 21 18:31:19 2015 : Debug: (0)   Proxy-State = 0x3337
Wed Oct 21 18:31:19 2015 : Debug: (0)   NodeID == '0000000002'
Sending Access-Request Id 16 from 0.0.0.0:45141 to 192.168.42.193:1812
        User-Name = 'fname.lname at my-network.com'
        User-Password = 'passme'
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 100
        Message-Authenticator = 0x29fc545638a7a1c6ec10b5f7e2c860c9
        Event-Timestamp = 'Oct 21 2015 18:31:19 CEST'
        Proxy-State = 0x3337"



As you can see  Realm and NodeID are not passed to the radius proxy in
the access request.

Can anyone suggest me something ?


Sincerely yours.


Tim
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list