Hello All. 
I Use freeradius  2.0.3 only for accounting purpose. 
More than that,  I have dozen realms that should be counted locally, and
only one that should be proxed to redundant AAA servers. 
My current configuration is the next:
>cat clients.conf
client test1 {                                                                  
                                                     
        ipaddr = 192.168.100.1
        secret          = somesecret                                            
                                                          
        shortname       = test1                                                 
                                                     
        nastype     = other                                                     
                                                    
}                                                                               
                                                    
                                                                                
                                                    
client test2 {                                                                  
                                                     
        ipaddr = 192.168.100.2                                                  
                                                    
        secret          = somesecret
        shortname       = test2                                                 
                                                     
        nastype     = other                                                     
                                                    
}                                            


>cat proxy.conf
proxy server {                                                                  
                                                    
        default_fallback = no                                                   
                                                    
}                                                                               
                                                    
                                                                                
                                                    
home_server test1 {                                                             
                                                     
        type = acct                                                             
                                                    
        ipaddr = 192.168.100.1
        port = 1646                                                             
                                                    
        secret = somesecret
        status_check = request                                                  
                                                    
        }                                                                       
                                                    
                                                                                
                                                    
home_server test2 {                                                             
                                                     
        type = acct                                                             
                                                    
        ipaddr = 192.168.100.2
        port = 1646                                                             
                                                    
        secret = somesecret
        status_check = request                                                  
                                                    
        }                                                                       
                                                    
                                                                                
                                                    
home_server_pool test {                                                         
                                                     
        type = fail-over                                                        
                                                    
        home_server = test1                                                     
                                                     
        home_server = test2                                                     
                                                     
        }                                                                       
                                                    
                                                                                
                                                    
realm dialup.domain.com {                                                       
                                                          
        acct_pool = test                                                        
                                                     
        nostrip                                                                 
                                                    
        }                                                                       
                                                    
    >cat default
preacct {                                                                       
                                                    
        suffix                                                                  
                                                    
}                                                                               
                                                    
                                                                                
                                                    
accounting {                                                                    
                                                    
        acct_unique                                                             
                                                    
        sql                                                                     
                                                    
} 

In case if radius work like daemon I can see next massages in the log
(different time different):
Error: Ignoring request from unknown home server 192.168.100.2 port 1646 
Error: Rejecting request 2583 due to lack of any response from home server
192.168.100.2
Error: Ignoring request from unknown home server 192.168.100.1 port 1646 
Error: Rejecting request 2545 due to lack of any response from home server
192.168.100.1

In case if radiusd –X than I get Segmentation fault:

Like example:
Rejecting request 602 due to lack of any response from home server
192.168.100.2 port 1646
Finished request 602.
Cleaning up request 602 ID 152 with timestamp +102
Cleaning up request 602 ID 0 with timestamp +102
Segmentation fault

1) Why “unknown home server” ?  clients.conf has this IPs?
2) Why Segmentation faul on –X ? After hours of test I decide that it’s
because of my configuration. (proxy.conf incorrect?)
3) Then I debug on realm that should accounting locally i can see the next:
++[acct_unique] returns ok
    rlm_realm: Looking up realm "domain.com" for User-Name =
"[EMAIL PROTECTED]"
    rlm_realm: No such realm "domain.com"
++[suffix] returns noop
+- entering group accounting
++[acct_unique] returns noop

Is it good idea to add next to proxy.conf or I do not need to do that ?

realm LOCAL {     
accthost        = LOCAL                                                         
                                                         
}                                                                               
                                                    
realm NULL {                
accthost        = LOCAL                                                         
                                              
}                                                                               
                                                   

realm DEFAULT {         
accthost        = LOCAL                                                         
                                                  
}                                      

I case if it's good then should I define “=LOCAL” somewhere ? I mean why
”accthost = LOCAL” is correct and ”accthost = LOCALXXX”  not ?

Thanx.
-- 
View this message in context: 
http://www.nabble.com/Problem-with-proxy-radius-function-tp16610498p16610498.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to