Hi Guys,
Two questions:
1. Is it possible to proxy authentication and
accounting packets to a remote server if a user logs
in without a realm i.e. user logging in as only
username not username@realm?
I want to send all the authentication request to
different server and do the accounting
At 01:41 AM 11/1/2001 -0800, Morgan M wrote:
Hi Guys,
Two questions:
1. Is it possible to proxy authentication and
accounting packets to a remote server if a user logs
in without a realm i.e. user logging in as only
username not username@realm?
Create a realm entry 'DEFAULT' in proxy.conf
Does anyone know a way of making FreeRADIUS proxy-forward all
requests which come in on a specified Called-Station-Id? Our users
won't (probably) kill us if we forced them all to use the realm
syntax but it would make our server switch more transparent to them.
In the users file:
testuser
Hendrik van der Merwe wrote:
In the users file:
testuserCalled-Station-Id == 5552321, Proxy-To-Realm = myrealm
Fall-Through = No
Thank you very much. Works like a charm. I love this mailing list. ;)
Christoph
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
the phone anyway) and then
either enter davis for 'users' authentication or davis@securid
which proxy-forwards his request to the RADIUS port of the ace server.
The proxy.conf reads:
realm securid {
type = radius
authhost = 10.10.10.80:2645
accthost = 10.10.10.80:2646
proxy radius and One authentication/accounting radius server
Two realms
Proxy server is configured to ip address xxx.xxx.xxx.xxx:1812
proxy.conf, acct_users, naslist, clients are changed on proxy server.
proxy.conf
realms A { type = radius
authhost= xxx.xxx.xxx.xxx
[EMAIL PROTECTED] wrote:
I work on the problem of missing accounting detail for two weeks.
The NAS must send accounting packets for it to go into the detail
file.
It seems that debug mode (-xx) is not useful for this case.
If the NAS doesn't send accounting packets, then you won't
Daniel Yeung [EMAIL PROTECTED] wrote:
I am configuring Freeradius-0.3 to replace my Merit radius on
Freebsd 4.3. I have one proxy freeradius and one normal
freeradius. No accounting log doesn't come out.
That's probably because your NAS isn't sending accounting packets.
I all else fails
Hi all
Recently, I replace my Merit radius to Freeradius. I downloaeded the
freeradius-devel-20010310 (freebsd port) from freebsd site and installed on freebsd
4.3.
I setup one as radius proxy and another as normal radius server.
The authentication works well. But no accounting log is found
Daniel Yeung [EMAIL PROTECTED] wrote:
Recently, I replace my Merit radius to Freeradius. I downloaeded the
freeradius-devel-20010310 (freebsd port) from freebsd site and
installed on freebsd 4.3.
That version is 6 months old. I'm a little surprised that the
freebsd ports collection is that
this, since in a proxy setup you can't pass Tunnel
Attributes.
2- I'm using usernames similar to this, 151000 , in hints, can I do
this
DEFAULT Prefix=151*.
Best Regards
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
or is the request rewritten so the proxy is acting like a
NAS?
There are two variables. Client-IP-Address, and NAS-IP-Address. The
NAS-IP-Address follows all the way through to your radius server from the
proxy; however, the Client-IP-Address is where your server see's the
request coming from
At 11:20 AM 9/5/2001 -0700, [EMAIL PROTECTED] wrote:
Hello all,
I am curious if anyone has tested freeradius with a 128bit proxy attribute.
Our upstream proxy requires us to be able to take and respond to the radius
requests with a 128bit proxy-state attribute.
Currently we are using Cistron
At 01:28 PM 9/5/2001 -0500, you wrote:
At 11:20 AM 9/5/2001 -0700, [EMAIL PROTECTED] wrote:
Hello all,
I am curious if anyone has tested freeradius with a 128bit proxy attribute.
Our upstream proxy requires us to be able to take and respond to the radius
requests with a 128bit proxy-state
At 01:28 PM 9/5/2001 -0500, you wrote:
At 11:20 AM 9/5/2001 -0700, [EMAIL PROTECTED] wrote:
Hello all,
I am curious if anyone has tested freeradius with a 128bit proxy
attribute.
Our upstream proxy requires us to be able to take and respond to the
radius
requests with a 128bit proxy-state
VISP Systems Administration [EMAIL PROTECTED] wrote:
If there is a pending wish list out there, I'll add my vote for this
option. =)
So submit a bug report, as a wishlist.
Source code patches, or suggestions for how it would be implemented
are welcomed, too.
Alan DeKok.
-
List
Hi,
Is there a way of specifying multiple remote servers per realm in
proxy.conf? Some of our clients have multiple radius servers and would
like automatic failover from the proxy server should one of their
servers fail.
Thanks,
Eddie
-
List info/subscribe/unsubscribe? See http
Eddie Stassen [EMAIL PROTECTED] wrote:
Is there a way of specifying multiple remote servers per realm in
proxy.conf? Some of our clients have multiple radius servers and would
like automatic failover from the proxy server should one of their
servers fail.
No, the code can't do that right
[EMAIL PROTECTED] wrote:
Eddie Stassen [EMAIL PROTECTED] wrote:
I would like to know if there is a way of proxying users only if certain
conditions are met iow 'check items' for proxied requests. In my
application I need to proxy certain realms only if for example
NAS-Port-Type==Async
I would like to know if there is a way of proxying users only if certain
conditions are met iow 'check items' for proxied requests. In my
application I need to proxy certain realms only if for example
NAS-Port-Type==Async. Any suggestions?
Thanks,
Eddie
-
List info/subscribe/unsubscribe? See
Eddie Stassen [EMAIL PROTECTED] wrote:
I would like to know if there is a way of proxying users only if certain
conditions are met iow 'check items' for proxied requests. In my
application I need to proxy certain realms only if for example
NAS-Port-Type==Async. Any suggestions?
Yes
Hellow
i am new to this newgroup and hope i dont ask any question that allready
has been asked
i have searched the archive but did not find the answer
neither on the help files
the description of the product says when proxying it can add attributes to
request
how is that done ?
what do i need
At 03:45 AM 8/22/2001 -0400, you wrote:
Hellow
i am new to this newgroup and hope i dont ask any question that allready
has been asked
i have searched the archive but did not find the answer
neither on the help files
the description of the product says when proxying it can add attributes to
[EMAIL PROTECTED] wrote:
the description of the product says when proxying it can add attributes to
request
how is that done ?
Hmm.. not that easily, I think. The current format of the 'users'
file is set up to add attributes to the reply, not the forwarded proxy
message.
what do i need
Hello my name is Jörg
Would it be possible with freeradius to
add some information to the suffix eg. realm of the
username an then proxy the request to an other radius?
following situation
we have mutliple NAS,
it would be very nice if we could based of from which
NAS the user is commming, add
according documentation
doc/proxy the proxy.conf and clients files on first and second freeradiuses.
2. Is there any possibility to use only one radius which could forward query
by realm to mysql which situated on another server?
I would apreciate any help
Svetlana
-
List info/subscribe/unsubscribe
401 - 426 of 426 matches
Mail list logo