>From: "Anson Rinesmith" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Subject: Proxy Setup
>Date: Fri, 5 Dec 2003 11:57:00 -0600
>Reply-To: [EMAIL PROTECTED]
>
>I want any username like [EMAIL PROTECTED] to be proxied to an existing
>radius server.
>
>I have added
>
>realm mydomain.net {
>
>        type        = radius
>
>        authhost    = 192.168.69.10:1645
>
>        accthost    = 192.168.69.10:1646
>
>        secret      = ascend
>
>}

>to my proxy.conf file. It still tries to authenticate locally. I was told
>not to put anything in my realms file.

>What am I missing?

If using SQL: Probably something like this:
 
mysql> select * from radgroupcheck;
+----+-----------+----------------+----+----------------+
| id | GroupName | Attribute      | op | Value          |
+----+-----------+----------------+----+----------------+
|  1 | dial      | Proxy-To-Realm | := | mydomain.net    |
+----+-----------+----------------+----+----------------+

mysql> select * from usergroup limit 1;
+----+----------+-----------+
| id | UserName | GroupName |
+----+----------+-----------+
|  1 | username | dial      |
+----+----------+-----------+
 
You can put it in radcheck as wel per user base or if prefer using groups (which I guess you will if you have more than 1 existing radius servers behind the proxy) do it as described.
 
One more thing, when running radiusd with -X you will still see it that it says to go to NULL realm but in reality it is going to the correct realm.   I don't know why the logs show this but I found this out the hard way using 0.9.2 that it was doing it correctly.
 
Glenn

Reply via email to