Hello Alan
Thanks for you replay.
I have configured freeradius to make preproxing. But i have another problem:
The "Reply-Message" didn't reach the application wich have been made auth request.
Ready to process requests.
rad_recv: Access-Request packet from host 11.0.0.2:3187, id=30, length=44
User-Name = "igor"
User-Password = "\330\014\257}"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/auth-detail-20050601'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/auth-detail-20050601
modcall[authorize]: module "auth_log" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
rlm_realm: No '@' in User-Name = "ig! or", looking up realm NULL
rlm_realm: Found realm "NULL"
rlm_realm: Adding Stripped-User-Name = "igor"
rlm_realm: Proxying request from user igor to realm NULL
rlm_realm: Adding Realm = "NULL"
rlm_realm: Preparing to proxy authentication request to realm "NULL"
modcall[authorize]: module "suffix" returns updated for request 0
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 0
users: Matched entry DEFAULT at line 152
modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns updated for request 0
Processing the pre-proxy section of radiusd.conf
modcall: entering group pre-proxy for request 0
radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/pre-proxy-detail-20050601'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/pre-proxy-detail-20050601
modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 0
preproxy_users: Matched entry DEFAULT at line 17
radius_xlat: ''
modcall[pre-proxy]: module "files" returns ok for request 0
modcall: group pre-proxy returns ok for request 0
Sending Access-Request of id 0 to 11.0.0.5:1812
User-Name = "igor"
User-Password = "\330\014\257}"
NAS-IP-Address = 11.0.0.2
Proxy-State = 0x3330
Calling-Station-Id := ""
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Reject packet from host 11.0.0.5:181! 2, id=0, length=43
Reply-Message = "Authorization failed."
Processing the post-proxy section of radiusd.conf
modcall: entering group post-proxy for request 0
radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/post-proxy-detail-20050601'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/post-proxy-detail-20050601
modcall[post-proxy]: module "post_proxy_log" returns ok for request 0
modcall[post-proxy]: module "eap" returns noop for request 0
modcall: group post-proxy returns ok for request 0
Login incorrect (Home Server says so): [igor/\330\014\257}] (from client test port 0)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 11.0.0.2:3187, id=30, length=44
Sending Access-Rejec! t of id 30 to 11.0.0.2:3187
Reply-Message = "Authorization failed."
--- Walking the entire request list ---
Waking up in 2 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 30 with timestamp 429db3c5
Nothing to do. Sleeping until we see a request.
rad_recv: Access-Request packet from host 11.0.0.2:3187, id=30, length=44
User-Name = "igor"
User-Password = "\330\014\257}"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/auth-detail-20050601'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/auth-detail-20050601
modcall[authorize]: module "auth_log" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
rlm_realm: No '@' in User-Name = "ig! or", looking up realm NULL
rlm_realm: Found realm "NULL"
rlm_realm: Adding Stripped-User-Name = "igor"
rlm_realm: Proxying request from user igor to realm NULL
rlm_realm: Adding Realm = "NULL"
rlm_realm: Preparing to proxy authentication request to realm "NULL"
modcall[authorize]: module "suffix" returns updated for request 0
rlm_eap: No EAP-Message, not doing EAP
modcall[authorize]: module "eap" returns noop for request 0
users: Matched entry DEFAULT at line 152
modcall[authorize]: module "files" returns ok for request 0
modcall: group authorize returns updated for request 0
Processing the pre-proxy section of radiusd.conf
modcall: entering group pre-proxy for request 0
radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/pre-proxy-detail-20050601'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/pre-proxy-detail-20050601
modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 0
preproxy_users: Matched entry DEFAULT at line 17
radius_xlat: ''
modcall[pre-proxy]: module "files" returns ok for request 0
modcall: group pre-proxy returns ok for request 0
Sending Access-Request of id 0 to 11.0.0.5:1812
User-Name = "igor"
User-Password = "\330\014\257}"
NAS-IP-Address = 11.0.0.2
Proxy-State = 0x3330
Calling-Station-Id := ""
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Reject packet from host 11.0.0.5:181! 2, id=0, length=43
Reply-Message = "Authorization failed."
Processing the post-proxy section of radiusd.conf
modcall: entering group post-proxy for request 0
radius_xlat: '/usr/local/var/log/radius/radacct/11.0.0.2/post-proxy-detail-20050601'
rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/11.0.0.2/post-proxy-detail-20050601
modcall[post-proxy]: module "post_proxy_log" returns ok for request 0
modcall[post-proxy]: module "eap" returns noop for request 0
modcall: group post-proxy returns ok for request 0
Login incorrect (Home Server says so): [igor/\330\014\257}] (from client test port 0)
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 11.0.0.2:3187, id=30, length=44
Sending Access-Rejec! t of id 30 to 11.0.0.2:3187
Reply-Message = "Authorization failed."
--- Walking the entire request list ---
Waking up in 2 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 30 with timestamp 429db3c5
Nothing to do. Sleeping until we see a request.
So, it receives replay only on sencond request. Application failed on the first request timeout.
What to do?
Thank you
Alan DeKok <[EMAIL PROTECTED]> wrote:
Maxim Hitrov <[EMAIL PROTECTED]>wrote:
> Can i use FreeRadius as intermadiate Radius that will change and forward Access-Requests params?
Yes. You should be able to do this using the "preproxy_users" file:
DEFAULT
Calling-Station-Id = "%{Framed-IP-Address}"
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html