Proxy based on auth type?

2013-02-01 Thread Bertalan Voros
Hello All, Another lame ass question. Is it possible to proxy requests based on Auth-Type? I now have a config which terminates PEAP locally and proxies through the inner-tunnel to an NPS using MSCHAP. This was my original goal. However, when I do a radtest to check what happens to an mschap

Re: Python access to attribute lists

2013-02-01 Thread Duarte Fonseca
Hi, I've modified rlm_python.c to get access to the remaining attribute lists if anyone is interested in the patch you can get it at https://dl.dropbox.com/u/797051/freeradius-python.patch The patch was done against version 2.1.12 shipped from CentOS. Any feedback would be greatly appreciated

Re: Proxy based on auth type?

2013-02-01 Thread Alan DeKok
Bertalan Voros wrote: Is it possible to proxy requests based on Auth-Type? Yes, but you don't want to do that. If I uncomment suffix in sites-enabled/default then it's reversed, mschap gets proxied but PEAP requests doesn't get sent through the inner tunnel. You need to *conditionally*

Re: Proxy based on auth type?

2013-02-01 Thread Bertalan Voros
Thanks Alan, It did fix the problem perfectly. On 1 February 2013 14:33, Alan DeKok al...@deployingradius.com wrote: Bertalan Voros wrote: Is it possible to proxy requests based on Auth-Type? Yes, but you don't want to do that. If I uncomment suffix in sites-enabled/default then it's

Re: Configuring accounting on Freeradius server

2013-02-01 Thread Alan DeKok
Deepti kulkarni wrote: The FAQ I looked at doesnt mention how-to configure accounting. Maybe I am looking at wrong place? http://wiki.freeradius.org/Home Does that look like the FAQ? There *IS* a FAQ link on that page. Read it. The FAQ describes what to do when you don't receive

Re: Configuring accounting on Freeradius server

2013-02-01 Thread Deepti kulkarni
Thank you the answers. I see that my freeradius server is receiving accounting request when I use radclient and it logs it as well. As you said that the client is responsible for sending accounting requests to the server, I am new to radius server and PAM, so not sure how this is done (apart from

Re: Configuring accounting on Freeradius server

2013-02-01 Thread Alan DeKok
Deepti kulkarni wrote: Thank you the answers. I see that my freeradius server is receiving accounting request when I use radclient and it logs it as well. That's really not the point, is it? The point is whether or not the *production* client sends accounting packets. As you said that the