Re: proxying accounting requests

[Angus Stewart]

This was a problem in v.3 and v.4 for which I submitted a patch which was,
apparently, applied.  Perhaps you would like to verify this. Here are the details:

In searching the list, I see that this was a reported problem for v0.3 and that
there is a patch... so, after taking a look at v0.4 I decided to implement the
patch on 0.3 (still not ready to make the switch to 4 -- sorry).

And - still didn't work.

After hunting around I think I have found the error - v.0.4

src/main/conffile.c - line 909 reads: c-acct_ipaddr = ip_getaddr (authhost);
should read: c-acct_ipaddr = ip_getaddr (accthost);

Have tried this and seems to fix the problem.

Chris Hartel wrote:

 Hi guys!

 I set up two radius server (A + B) one of which (A) is supposed to do the
 authentication part and the other one is supposed to to the accounting. So B
 should forward all auth requests to A while A on the other hand forwars all
 acct requests to B.

 Now forwarding the auth packages works fine but i just can't get the acct
 fowarding to work. Instead A just handles them itself.

 Here's my proxy.conf for A (192.168.1.197)

 ...
 realm   test.com {
 type= radius
 authhost= LOCAL
 accthost= 192.168.1.230:1813
 secret  = test
 nostrip
 }
 ...

 and B (192.168.1.230)

 ...
 realm   test.com {
 type= radius
 authhost= 192.168.1.197:1812
 accthost= LOCAL
 secret  = test
 nostrip
 }
 ...

 Here's the output of radiusd -xx

 Thread 1 handling request 0, (1 handled so far)
 User-Name = [EMAIL PROTECTED]
 Acct-Status-Type = Start
 Acct-Session-Id = 1260
 modcall: entering group preacct
   modcall[preacct]: module suffix returns ok
   modcall[preacct]: module files returns noop
   modcall[preacct]: module preprocess returns noop
 modcall: group preacct returns ok
 modcall: entering group accounting
 radius_xlat:  '//var/log/radius/radacct/192.168.1.211/detail'
 rlm_detail: //var/log/radius/radacct/%{Client-IP-Address}/detail expands to
 //var/log/radius/radacct/192.168.1.211/detail
   modcall[accounting]: module detail returns ok
   modcall[accounting]: module unix returns noop
 radius_xlat:  '[EMAIL PROTECTED]'
   modcall[accounting]: module radutmp returns noop
 modcall: group accounting returns ok
 Sending Accounting-Response of id 96 to 192.168.1.211:1746
 Finished request 0
 Going to the next request
 Thread 1 waiting to be assigned a request

 Any ideas?

 Thanx,
 Chris

 --
 Christoph R. Hartel
 Linux System Administrator

 eMind GmbH   |  phone:  +49 671 794613 - 0
 Rosenheimer Strasse 2-4  |  fax:+49 671 794613 - 50
 55543 Bad Kreuznach  |  mobile: +49 163  723
 Germany  |  email:  [EMAIL PROTECTED]

 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Proxy Accounting proxy.conf authhost vs accthost v.0.3 and v.0.4

[Angus Stewart]

Hi all,

I recently configured a freeradius 0.3 realm in the proxy.conf file that used
different IP addresses for authentication and accounting.

It didn't work.  -- the authentication IP address was used for both
authentication and accounting.

In searching the list, I see that this was a reported problem for v0.3 and that
there is a patch... so, after taking a look at v0.4 I decided to implement the
patch on 0.3 (still not ready to make the switch to 4 -- sorry).

And - still didn't work.

After hunting around I think I have found the error - v.0.4

src/main/conffile.c - line 909 reads: c-acct_ipaddr = ip_getaddr (authhost);
should read: c-acct_ipaddr = ip_getaddr (accthost);

Have tried this and seems to fix the problem.

Angus.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Max Request Time (max_request_time) No Timeout

[Angus Stewart]

I am currently testing FreeRadius v.0.3 as a proxy server and have
noticed that a REJECT message is not being generated for messages that
SHOULD time out.  I have set max_request_time to 5 seconds in the
radiusd.conf file.

Have also tried to toggle the setting for delete_blocked_requests with
no success.

Suggestions ?

Thx in advance,

Angus.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html