Norbert, At 03:23 PM 1/21/2003 +0100, you wrote:
I start my freeradius 0.8.1 with /usr/local/sbin/radiusd -i 127.0.0.1 -p 1812 -sfXJust a note, you do not need the 'strip' token...it is the default. Actually, the way you have the 'users' file set up...you would want 'nostrip'.
and have problems to get proxyauthentication working. Without the realm everything works as expected.
proxy_requests = yes in radiusd.conf
here is my minimal users file:
users:
nw@myrealm Auth-Type := Local, User-Password == "testing"
Service-Type = Framed-User,
Framed-IP-Address = 172.16.3.33,
Framed-Protocol = PPP
proxy.conf(only the Configuration for the proxy realms, above no changes)
realm myrealm {
type = radius
authhost = LOCAL
accthost = LOCAL
strip
}
I get the following:You do not have to set the auth port, that is just debug output. If you are receiving a reject, try adding nostrip to your proxy.conf entry. See /path/to/src/radiusd/raddb/proxy.conf
Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on 1814/udp.
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:1043, id=45, length=94
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "nw@myrealm"
CHAP-Challenge = "\207\234\202\201q(\350V\361\371e\206\024\004\277@\t"
CHAP-Password = 0x011cf65cb5691e1c9ad695579e01810184
NAS-IP-Address = 123.123.123.123
NAS-Port = 0
modcall: entering group authorize
modcall[authorize]: module "preprocess" returns ok
rlm_chap: Adding Auth-Type = CHAP
modcall[authorize]: module "chap" returns ok
modcall[authorize]: module "mschap" returns notfound
rlm_realm: Looking up realm myrealm for User-Name = "nw@myrealm"
rlm_realm: Found realm myrealm
rlm_realm: Adding Stripped-User-Name = "nw"
rlm_realm: Proxying request from user nw to realm myrealm
rlm_realm: Adding Realm = "myrealm"
rlm_realm: Authentication realm is LOCAL.
rlm_realm: auth_port is not set. proxy cancelled
Where do I have to set an auth_port ?
Chris
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html