).
there are a small number of cases where we would love it if we could just
/dev/null this proxy accounting if the remote server is dead/zombie,
however i haven't figured out a way to actually configure this.
it seems like i want to use a fallback server in the home_server_pool,
where that fallback server
On Wed, Nov 16, 2011 at 6:54 AM, jared r r spiegel j...@ice-nine.org wrote:
it seems like i want to use a fallback server in the home_server_pool,
where that fallback server would just 'ok' accounting or otherwise toss it
in the trash, but after a few iterations of trying to make this work
Thank you Alan for your support.
I have one question now, in the realm part test_cpe.com I want to
maintain this realm in the user name for accounting. for Example
MAC@test_cpe.com it should not remove the suffix.
On Fri, Feb 25, 2011 at 7:39 PM, Alan DeKok al...@deployingradius.com wrote:
Waqas
Waqas Toor wrote:
Thank you Alan for your support.
I have one question now, in the realm part test_cpe.com I want to
maintain this realm in the user name for accounting. for Example
MAC@test_cpe.com it should not remove the suffix.
Read raddb/proxy.conf. This is documented. Read the realm
Waqas Toor wrote:
Did you bother *reading* the robust-proxy-accounting file?
I have configured the robust-proxy-accounting
That doesn't answer the question. The comments in that file describe
how it works. This includes answering your original question.
I am missing something but could
and virtual servers, treat me as a noob
Waqas
On Fri, Feb 25, 2011 at 6:02 PM, Alan DeKok al...@deployingradius.com wrote:
Waqas Toor wrote:
Did you bother *reading* the robust-proxy-accounting file?
I have configured the robust-proxy-accounting
That doesn't answer the question
Waqas Toor wrote:
Thank you Alan for you help,
But please can you point out where I am wrong or a line may be which
is a bad config, I am having trouble understanding why the packets are
not being forwarded while being in site-enabled directory.
As I said, the debug log you posted shows
Ahaan, Ok below is an accounting packet and and its response
also please tell me if the the lines that i get while in debug mode are normal ?
Polling for detail file
/usr/local/var/log/radius/radacct/detail.example.com/detail-*:*
Detail listener
Waqas Toor wrote:
Ahaan, Ok below is an accounting packet and and its response
also please tell me if the the lines that i get while in debug mode are
normal ?
Yes, but...
[suffix] Looking up realm test_cpe.com for User-Name =
002682D1A232@test_cpe.com
[suffix] No such realm
Hello Community,
I want to store accounting packets to local database and proxy same
accounting packet to some other accounting listener server.
I couldn't make sense out of copy-acct-to-home-server that where I can
define the other accounting listening server.
also if I use robust-proxy
Waqas Toor wrote:
I want to store accounting packets to local database and proxy same
accounting packet to some other accounting listener server.
I couldn't make sense out of copy-acct-to-home-server that where I can
define the other accounting listening server.
also if I use robust-proxy
packet to some other accounting listener server.
I couldn't make sense out of copy-acct-to-home-server that where I can
define the other accounting listening server.
also if I use robust-proxy-accounting I am unable to understand the
pass-through accounting, is it going to save to local
Waqas Toor wrote:
but what to do to get accounting to other client, Also if that fails
is it going to create detail files ?
Did you bother *reading* the robust-proxy-accounting file?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jeremy Brown wrote:
I'm trying to setup a FreeRadius server to act as a proxy for another
DNS server, and this seems straightforward enough from the
documentation, however I also want the FreeRadius proxy to send
accounting information to another Radius server.
That's not very clear. You
Yes, this has also been my assumption and I've tried this but I've
failed in making both instances proxy the packet.
So what does the debug log say?
There must be something I'm not getting because I don't see how I can
have two realms with one pool and home_server each in
Hi,
I'm running FreeRADIUS 2.1.6 on FreeBSD 7.2 and I need to proxy incoming radius
accounting requests to two different ports at the same destination ip. I'm
quite inexperienced with freeradius and I'm not sure I've understood completely
what I need to do.
I've set up realms, home_servers
Hi again,
This subject is misleading and should rather read: How to proxy an accounting
request to the same destination twice
I've now also tried with robust-proxy-accounting but it only sends to one of
the home_servers.
Any advice or pointers in the right direction will be greatly
d...@ft.fo
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Thursday, September 03, 2009 6:12 PM
Subject: RE: How to proxy accounting requests to multiple destinations
Hi again,
This subject is misleading and should rather read: How to proxy an
accounting request
Sent: Thursday, September 03, 2009 11:28 PM
To: FreeRadius users mailing list
Subject: Re: How to proxy accounting requests to multiple destinations
I suspect you'll need to treat it like two unique servers, and create two
(2) copy-acct-to-home-server instances (or double up the entries in the
one
This subject is misleading and should rather read: How to proxy an
accounting request to the same destination twice
Why? What is home server supposed to do with the duplicate packet (that it
couldn't do with the first one)?
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe?
-users-bounces+dol=ft...@lists.freeradius.org
[freeradius-users-bounces+dol=ft...@lists.freeradius.org] On Behalf Of Ivan
Kalik [...@kalik.net]
Sent: Friday, September 04, 2009 0:01
To: FreeRadius users mailing list
Subject: RE: How to proxy accounting requests to multiple destinations
This subject
Dánial Olsen wrote:
Yes, this has also been my assumption and I've tried this but I've failed
in making both instances proxy the packet.
So what does the debug log say?
There must be something I'm not getting because I don't see how I can
have two realms with one pool and home_server
Chris Howley wrote:
I can confirm that the change made to the event.c file fixed the problem
with the robust proxy accounting.
That's great news!
Many thanks for you help.
And thanks for spending the time to not only debug it, but provide
useful feedback.
Alan DeKok.
-
List info
Chris Howley wrote:
Here's the output from FR2.1.7.
OK. Please grab an updated copy of the 2.1.7 tar file from
http://git.freeradius.org/pre/
I've put some changes in which should help.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan,
This is the debug output using the latest release of 2.1.7 from
http://git.freeradius.org/pre.
Hm, for some reason failure doesn'r result in retry in last pass:
...
Found Post-Proxy-Type
server home.example.com {
+- entering group Fail {...}
[detail.example.com] Suppressing
Chris Howley wrote:
This is the debug output using the latest release of 2.1.7 from
http://git.freeradius.org/pre.
Arg. There was an idiotic typo in the code. I can't help but feel at
least partially responsible.
OK... I've put the updated version on the same web site. You don't
have
Chris Howley wrote:
I doubled the value of cleanup delay in radiusd.conf. This change didn't fix
the problem (see below).
Grab a copy of the server from http://git.freeradius.org/pre/
I've added some debug messages which might help explain what's going on.
Alan DeKok.
-
List
When both RADIUS servers are operational robust proxying works. When one
of the servers is
unreachable the other server (that's attempting to proxy an accounting
request) will delete
the detail.work file from the listener's sub-directory after failing to
get a response from
the other
Hi,
I used the example configuration and got the same result.
.
2. I moved the following from the robust-proxy-accounting file to the
proxy.conf file.
why?
the robust-accounting stuff is a self-contained virtual server. by putting
this into proxy.conf you have introduced
Thank you for your help. I've removed the configuration from the
proxy.conf and I'm now using
the original robust-proxy-accounting file. However, the problem persists -
the detail.work
file is being erased.
Which detail.work? Accounting one or failover one? Are you implying that
failover
Chris Howley wrote:
I used the example configuration and got the same result.
Well... it worked the last time I tried it, hence the example.
The goal is:
a) have a fallback configuration in the pool that writes packets to
the detail file
b) read from the detail file, and try to proxy
Chris Howley wrote:
Sending proxied request internally to virtual server.
server acct_detail.leeds.ac.uk {
+- entering group accounting {...}
[detail.leeds.ac.uk] Suppressing writes to detail file as the request was
just read from a detail file.
++[detail.leeds.ac.uk] returns noop
} #
JDL wrote:
In FreeRADIUS 2.x, the radrelay functions have been built into radiusd.
That's the intention.
However, I seem to be having problems with data loss. Everything works
fine when the remote accounting server is up. However, when it goes
down, here is what I am seeing.
...
4) Here
-users-bounces+francesco.xb.toro=ericsson@lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: venerdì 16 gennaio 2009 17.44
To: FreeRadius users mailing list
Subject: Re: Static Proxy Accounting
Francesco Toro XB wrote:
I guess if it's possible to set FreeRadius to statically forward
accounting
After short analisys I decided to use the configuration explained into the
copy-acct-to-home-server file.
I configured a virtual server polling on the detail file (I set the creation
of one single detail file for every client connected) in order to ONLY
forwards all the incoming accounting
t...@kalik.net wrote:
In my experience detail reader drops a packet once in about 50,000 reads.
Hmm... that's not good.
Any reason why?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Since we started using buffered accounting there is an open session now
and then. Before, when we wrote directly to sql, no packets were lost,
so I have to assume it is coming from radrelay.
It is totally random: no relation to load etc. I can't figure out any
reason. Server is self-build from
t...@kalik.net wrote:
Since we started using buffered accounting there is an open session now
and then. Before, when we wrote directly to sql, no packets were lost,
so I have to assume it is coming from radrelay.
Weird.
We will just start using checkrad. No need before - no dropped packets
Since we started using buffered accounting there is an open session now
and then. Before, when we wrote directly to sql, no packets were lost,
so I have to assume it is coming from radrelay.
Weird.
Oh, it was happening much more often in testing. Often enough for me to
notice. I would place
Several options are explained in raddb/sites-available.
Ivan Kalik
Kalik Informatika ISP
Dana 16/1/2009, Francesco Toro XB francesco.xb.t...@ericsson.com
piše:
Hi All,
I'm evaluating FreeRadius Server for my Company. I'm very interested in
a specific functionality, as explained in the mail
Francesco Toro XB wrote:
I guess if it's possible to set FreeRadius to statically forward
accounting request ( only Start, Stop and Interim ) still acting as
Master Server,
Please don't use terms like statically forward.
i.e. without waiting for the Home Server respose before sending the
Mailing List wrote:
I want that my radius immediately responds to the NAS regardless the
state of the home server. My radius does not have to wait for the
response of the home server, it sends the ACK back
immediately to the NAS.
You want to read raddb/sites-available/decoupled-accounting.
Hi,
Well, you have to clarify what you want to do - if you want your
radius server (A) to respond if the home server (B) is down or not.
But both scenarios are possible and can be achieved with freeradius.
kind regards
Pshem
2008/8/4 Mailing List [EMAIL PROTECTED]:
Hi,
I have freeradius (A)
Hi,
I want that my radius immediately responds to the NAS regardless the
state of the home server. My radius does not have to wait for the
response of the home server, it sends the ACK back
immediately to the NAS.
Regards,
Kurt
On 04 Aug 2008, at 05:47, Pshem Kowalczyk wrote:
Hi,
radacct table.
No: they're each writing the accounting data to local files. No
database there.
If that is so, you don't need to proxy accounting from one radius
server to the other - they already have a complete picture.
Just configure them both to proxy accounting to the NMS.
I think
On Thu, 12 Jun 2008, Alan DeKok wrote:
I'm looking to have both of these systems proxy incoming accounting
data to each other, ...
That should be easy. See the detail file readers in
raddb/sites-available/copy-acct-to-home-server.
Ok. I've been looking in the right place for that.
I'd
No: they're each writing the accounting data to local files. No
database there.
If that is so, you don't need to proxy accounting from one radius
server to the other - they already have a complete picture.
Just configure them both to proxy accounting to the NMS.
I think that what you're
to understand the comments in
raddb/sites-available/copy-acct-to-home-server, raddb/proxy.conf, and
the relevant parts of raddb/radiusd.conf, but I'm not sure I have yet
understood whether what I want can be done: proxy accounting-request
packets from both production RADIUS servers to each other
, but I'm not sure I have yet
understood whether what I want can be done: proxy accounting-request
packets from both production RADIUS servers to each other AND to the
wireless network management system (though I expect that the NMS would
get from each RADIUS server only accounting-request packets
accounting data into the same
radacct table. If that is so, you don't need to proxy accounting from
one radius server to the other - they already have a complete picture.
Just configure them both to proxy accounting to the NMS.
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http
kevin wrote:
I want to make an option not to proxy accounting but log locally.
What option can I take? Should I make a preproxy code for this function?
Remove any instance of the module realm (it's named suffix in the
default config file) from the section preacct.
--
Nicolas Baradakis
I want to make an option not to proxy accounting but log locally.
What option can I take? Should I make a preproxy code for this function?
Kevin
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I want to make an option not to proxy accounting but log locally.
What option can I take? Should I make a preproxy code for this function?
In proxy.conf, you define where to send the accounting packets.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
53 matches
Mail list logo
