(RADIATOR) Proxy pbs

Romain Vergniol romain.vergniol at cegedim.fr
Mon Oct 15 05:15:35 CDT 2001


Salut Hugh,

thank you for your help, the proxy works fine now.
But is this normal that the proxy sends an empty acounting-response packet
before the real one ?
Is there a way to avoid this ?


Romain VERGNIOL
CEGEDIM
Service Réseau Boulogne
Fax : +33 01 46 03 45 95
Tel  : +33 01 49 09 84 02
romain.vergniol at cegedim.fr



----- Original Message -----
From: "Hugh Irvine" <hugh at open.com.au>
To: "Gustavo Moreira" <gmoreira at arnet.com.ar>; "Romain Vergniol"
<romain.vergniol at cegedim.fr>
Cc: <radiator at open.com.au>
Sent: Saturday, October 13, 2001 5:23 AM
Subject: Re: (RADIATOR) Proxy pbs


>
> Salut Romain -
>
> The correct answer to your question is to reverse the order of your AuthBy
> RADIUS clauses so the result of the last AuthBy is the result of the
> authentication.
>
> # define accounting before authentication
>
>   <Realm DEFAULT>
>           AuthByPolicy ContinueAlways
>
>              <AuthBy RADIUS>
>                   Host 172.29.xx.zz
>                   NoForwardAuthentication
>                   AcctPort 1646
>                   Secret xxxxxxxxxxxx
>                   LocalAddress 172.29.yy.yy
>            </AuthBy>
>
>            <AuthBy RADIUS>
>                   Host 172.29.xx.xx
>                   Host 172.29.xx.yy
>                   AuthPort 1645
>                   NoForwardAccounting
>                   LocalAddress 172.29.yy.yy
>                  <Host 172.29.xx.xx>
>                           Secret xxxxxxxxxxx
>                   </Host>
>                   <Host 172.29.xx.yy
>                          Secret xxxxxxxxxx
>                   </Host>
>           </AuthBy>
>
>   </Realm>
>
>
> hth
>
> Hugh
>
> PS - you really should not use Synchronous with an AuthBy RADIUS, as the
> impact on performance can be extreme.
>



===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list