Re : SQL and Proxy acct in a virtual server
Alan DeKok wrote:
Frank Bollet wrote:
How could I define a specific accounting for a given realm ?
You don't.
So, the best practice here is to put specific accounting in
sites-available/default ?
For example:
### File: sites-available/default
[...]
accounting {
if (Realm == foo) {
sql_foo
}
elsif (Realm == bar) {
sql_bar
}
}
###
Setting up virtual servers for each *local* realm is not useful.
I obviously misunderstood the virtual server purpose. I'm basically just trying
to separate each realm (actually *partners*, who can have multiple realms but
one set of RADIUS proxys) in the configuration. I thought I could use the
virtual server functionality to separate each partner. So I would end up with
only one file for partner A, that could be very easily [de]activated (with
*-available and *-enabled) and easily cloned.
Even if virtual servers are not designed for that use, that works for locally
managed (ie non proxied) realms, but not for proxied realms because virtual
servers only execute pre and post proxy sections in that case.
Is there a way to separate the configuration for each partner, or should I just
put everything in sites-available/default because it's how it's supposed to
work?
Thank you,
Frank
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re : SQL and Proxy acct in a virtual server
On Wed, Oct 27, 2010 at 10:06:30AM +0100, Frank Bollet wrote: Is there a way to separate the configuration for each partner, or should I just put everything in sites-available/default because it's how it's supposed to work? Hmm, isn't it possible to use $INCLUDE in there, too, so the disabling is done by commenting out a single line...? -- 2. That which causes joy or happiness. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re : SQL and Proxy acct in a virtual server
Frank Bollet wrote: So, the best practice here is to put specific accounting in sites-available/default ? Isn't that what I already said? I obviously misunderstood the virtual server purpose. I'm basically just trying to separate each realm (actually *partners*, who can have multiple realms but one set of RADIUS proxys) in the configuration. I thought I could use the virtual server functionality to separate each partner. Yes, you can. But you then need to proxy (i.e. route) the packets to the correct destination virtual server. You weren't doing that. Is there a way to separate the configuration for each partner, or should I just put everything in sites-available/default because it's how it's supposed to work? You can separate the configuration. But you need to configure that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re : Re : SQL and Proxy acct in a virtual server
Alan DeKok wrote: Yes, you can. But you then need to proxy (i.e. route) the packets to the correct destination virtual server. You weren't doing that. And how could I do that ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SQL and Proxy acct in a virtual server
Frank Bollet wrote:
If I define home servers and a virtual server in a home server pool, the
virtual
server is only used for pre/post proxy. accounting {} is used from
sites-enabled/default.
Yes. That's the way it works.
How could I define a specific accounting for a given realm ?
You don't.
I'm not sure what you're trying to do. The virtual servers are there
to separate logically independent configurations. Since you're doing
*local* accounting for multiple realms, that accounting is done with
*one* virtual server.
Setting up virtual servers for each *local* realm is not useful.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
