RE: Proxy RADIUS problem
My problem with the configuration above described is my RADIUS proxy doesn't
active fallover. It means the first entry falis, freeradius doesn't verify
the following entry of domain1. I test putting the label:
ldflag = fail_over
in the description os a realm entry. Whay can I do???
Hi people,
I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS
correctly
with one remote server, but if I add in my proxy.conf file a redundant
one
because the primary RADIUS fails, it doesn't work correctly.
I want to do roaming with two remote RADIUS servers to the domain1
since
my RADIUS. However, I get only do roaming with the first one, because withe
the first fails, my RADIUS doesn't ask to the second remote RADIUS server.
Could you tell me where is the configuration bug?
I attached my proxy.conf file:
***
proxy server {
synchronous = no
retry_delay = 5
retry_count = 3
dead_time = 120
default_fallback = yes
post_proxy_authorize = yes
}
realm domain1 {
type= radius
authhost = 123.123.123.123:11812
accthost = 123.123.123.123:11813
secret = secret
ldflag = fail_over
nostrip
}
realm domain1 {
type= radius
authhost= 123.123.123.124:11812
accthost= 123.123.123.124:11813
secret = secret
ldflag = fail_over
nostrip
}
_
¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en
MSN Motor. http://motor.msn.es/researchcentre/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Proxy RADIUS problem
Have you tried:
---CUT---
#realm serv.com {
# type= radius
# authhost= radius.serv.com:1645
# accthost= radius.serv.com:1646
# secret = TheirKey
# ldflag = round_robin
# nostrip
#}
#
# Another node for serv.com
#
#realm serv.com {
# type= radius
# authhost= radius2.serv.com:1645
# accthost= radius2.serv.com:1646
# secret = TheirKey2
# ldflag = round_robin
# nostrip
#}
---CUT---
This is from the proxy.conf file. I have not tested it... But I don't see
why it wouldn't work.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Santiago Balaguer García
Sent: Monday, April 24, 2006 9:49 AM
To: freeradius-users@lists.freeradius.org
Subject: Proxy RADIUS problem
Hi people,
I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS correctly
with one remote server, but if I add in my proxy.conf file a redundant one
because the primary RADIUS fails, it doesn't work correctly.
I want to do roaming with two remote RADIUS servers to the domain1 since
my RADIUS. However, I get only do roaming with the first one, because withe
the first fails, my RADIUS doesn't ask to the second remote RADIUS server.
Could you tell me where is the configuration bug?
I attached my proxy.conf file:
***
proxy server {
synchronous = no
retry_delay = 5
retry_count = 3
dead_time = 120
default_fallback = yes
post_proxy_authorize = yes
}
realm domain1 {
type= radius
authhost = 123.123.123.123:11812
accthost = 123.123.123.123:11813
secret = secret
nostrip
}
realm domain1 {
type= radius
authhost= 123.123.123.124:11812
accthost= 123.123.123.124:11813
secret = secret
nostrip
}
_
Descarga gratis la Barra de Herramientas de MSN
http://www.msn.es/usuario/busqueda/barra?XAPID=2031DI=1055SU=http%3A//www.
hotmail.comHL=LINKTAG1OPENINGTEXT_MSNBH
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Proxy RADIUS problem
Le Mon, Apr 24, 2006 at 10:37:53AM -0400, Reynold McGuire ecrivait:
Have you tried:
---CUT---
#realm serv.com {
# type= radius
# authhost= radius.serv.com:1645
# accthost= radius.serv.com:1646
# secret = TheirKey
# ldflag = round_robin
# nostrip
#}
#
# Another node for serv.com
#
#realm serv.com {
# type= radius
# authhost= radius2.serv.com:1645
# accthost= radius2.serv.com:1646
# secret = TheirKey2
# ldflag = round_robin
# nostrip
#}
---CUT---
This is from the proxy.conf file. I have not tested it... But I don't see
why it wouldn't work.
He just forgot
ldflag = round_robin
in both realms definition.
Fox.
signature.asc
Description: Digital signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
