Matthew, Thanks for the detailed followup. I made all your suggested changes, but I'm a little uncertain about the changes to the proxy.conf file.
Here is what I added in proxy.conf: home_server myhomeserver { type = acct ipaddr = xxx.xxx.xxx.xxx port = 1813 secret = ?????? } home_server_pool poolit { home_server = myhomeserver virtual_server = copy-acct-to-home-server type = fail-over } realm home_realm { acct_pool = poolit } Is this right? Bill On 10/2/2012 2:58 AM, Matthew Newton wrote: > Hi, > > On Mon, Oct 01, 2012 at 07:14:05PM -0500, Bill Schoolfield wrote: >> In keeping with recommended practice, I have modified very little. > > That's good. For this purpose, you can actually cut out quite a > lot - but make sure you've got your config in version control > (e.g. git) before you start so that you can easily backtrack if > things go wrong. > >> I edited the proxy.conf file and enabled the >> copy-acct-to-home-server server. What else do I need to do? >> Could someone provide a working example configuration? I'm a >> little shaky on the realm processing. Perhaps that's the issue. > > copy-acct-to-home-server reads a detail file and pushes the > "packets" into a virtual server for processing. So you need to > write to a detail file for it to read. From your debug output it > looks like you're using the standard configuration for 'detail', > which won't be where copy-acct-to-home-server expects to read it > from. > > Try something like > > modules/relay_detail: > > detail relay_detail { > detailfile = ${radacctdir}/relay-detail > } > > sites-enabled/default: > > ... > accounting { > relay_detail > } > ... > > > That should get all accounting packets buffered to > ${radacctdir}/relay-detail. Then you need to read them and forward > them on, so - > > sites-enabled/copy-acct-to-home-server: > > server copy-acct-to-home-server { > listen { > type = detail > filename = ${radacctdir}/relay-detail > } > preacct { > update control { > Proxy-To-Realm := 'home_realm' > } > } > accounting { > ok > } > } > > > Then make sure your proxy.conf is configured with realm home_realm > correctly. > > proxy.conf: > > realm home_realm { > ... > } > > > This should all write accounting packets to the local detail file, > then read them and send them over to the home server. If the home > server is down, they will buffer up on this system until the home > server comes back again. That should mean you don't drop any logs. > > Run radiusd -X and watch the output. You should see packets coming > in (like your original post), but you should also see the detail > reader wake up every second or so and check for packets to relay. > If you're not seeing that, then you haven't enabled > copy-acct-to-home-server correctly. You should then see that pick > up packets and process them. > > Cheers, > > Matthew > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html