I am proxying auth from my server (freeradius, .8.1) to another server
(cistron radius) and when running radtest, I can only get correct
answers if I add the '1' to radtest to turn the Framed-Protocol = PPP on

How do I insert that into a auth request on the regular proxy? Or,
should I just have the other server correct itself in some manner? 

Examples of my radtesting are below, names are changed to protect the
guilty.

THIS ONE FAILS: 

$ radtest [EMAIL PROTECTED] userpass localhost 1 testing123 
Sending Access-Request of id 142 to 127.0.0.1:1812
        User-Name = "[EMAIL PROTECTED]"
        User-Password = "e\024c\311\221cN\226\245\302HO\261\n+a"
        NAS-IP-Address = auth-1.myhost.com
        NAS-Port = 1
Re-sending Access-Request of id 142 to 127.0.0.1:1812
        User-Name = "[EMAIL PROTECTED]"
        User-Password = "e\024c\311\221cN\226\245\302HO\261\n+a"
        NAS-IP-Address = auth-1.myhost.com
        NAS-Port = 1
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=142,
length=20

THIS ONE WORKS

$ radtest [EMAIL PROTECTED] userpass localhost 1 testing123  1
Sending Access-Request of id 186 to 127.0.0.1:1812
        User-Name = "[EMAIL PROTECTED]"
        User-Password = "\035~\275RG\314Y9\327\2607\276;D\371\016"
        NAS-IP-Address = auth-1.myhost.com
        NAS-Port = 1
        Framed-Protocol = PPP
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=186,
length=56
        Framed-IP-Netmask = 255.255.255.0
        Framed-MTU = 576
        Session-Timeout = 14400
        Service-Type = Framed-User
        Framed-Protocol = PPP
        Framed-Compression = Van-Jacobson-TCP-IP


My proxy stanza for this looks something like:

realm   domain.net {
        type            = radius
        authhost        = 192.168.1.1:1812
        accthost        = 192.168.1.1:1813
        secret          = supersecret
        nostrip
}


Thank you. 

j
-- 

==================================================
+ It's simply not       | John Keimel            +
+ RFC1149 compliant!    | [EMAIL PROTECTED]        +
+                       | http://www.keimel.com  +
==================================================

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to