deployingradius and send Accounting to a nother server
Linux Threads
linuxthreads at gmail.com
Wed Sep 30 14:31:52 CEST 2020
Hi Guys,
I am still not winning,
for replication: the home server, home server pool and the realm are
configured in proxy.conf
replicate should be listed in sites-enabled/"site" either under the
below sections depending on requirements I am using accounting:
authorize
accounting
preacct
pre-proxy
recv-coa
and control I have listed it under accounting:
update control {
&Replicate-to-Realm := "REALM-NAME"
}
do I leave mods-enabled/replicate as is?
replicate {
}
if a user auths with username or nt-domain\username, it does not
replicate,
the only time it send packets to home server is when I use:
echo Message-Authenticator=0x00|radclient 127.0.0.1 acct testing123
Received response ID 21, code 5, length = 20
replicate is loaded:
Wed Sep 30 09:02:45 2020 : Debug: Loaded rlm_replicate, checking if
it's valid
Wed Sep 30 09:02:45 2020 : Debug: # Loaded module rlm_replicate
Wed Sep 30 09:02:45 2020 : Debug: # Loading module "replicate" from
file /etc/freeradius/3.0/mods-enabled/replicate
Wed Sep 30 09:02:45 2020 : Debug: Loaded rlm_realm, checking if it's
valid
I have no otherway of testing this exept if I auth against the AP
Thanks in advance
On Mon, 2020-09-28 at 08:55 -0400, Alan DeKok wrote:
> > the replicate module says that it works the same way as proxy
>
> No, it doesn't. The documentation explicitly says that it's not
> the same as proxying. It's similar, but not "the same".
>>>
> > > Do you have a *specific* question about how to do it, or about
> > > the
> > > documentation?
> >
> > the user only authenticate with the nt-domain username, how is this
> > tied to a realm?
>
> via the Replicate-To-Realm attribute... as the documentation says.
>
> The documentation says how to use the "replicate" module. If you
> try to do anything else, it won't work.
>
> > Mon Sep 28 09:46:43 2020 : Debug: # Loading accounting {...}
> > Mon Sep 28 09:46:43 2020 : Debug: replicate
> > Mon Sep 28 09:46:43 2020 : Debug: update {
> > Mon Sep 28 09:46:43 2020 : Debug: &control:Replicate-To-Realm :=
> > "CLIENT-ACCT-REALM"
> >
> >
> > replicate config file:
> > replicate {
> >
> > home_server CLIENT-ACCT-SERVER {
>
> No, you can't invent configuration and expect it to work.
>
> You can't put "home_server" into the configuration for the
> replicate module.
>
> Read the debug output... it will show you that it is NOT loading
> the "CLIENT-ACCT-SERVER" configuration.
>
> Realms and home_servers go into proxy.conf.
>
> Alan DeKok.
>
More information about the Freeradius-Users
mailing list