[prev in list] [next in list] [prev in thread] [next in thread]
List: freeradius-users
Subject: Re: If MSCHAP attributes exist, use for AuthN, otherwise, force Kerberos? Also, gracefully accepting
From: Alan DeKok <aland () deployingradius ! com>
Date: 2021-03-11 12:32:19
Message-ID: 566B3BAD-93BC-47D9-9BBB-512D06E39770 () deployingradius ! com
[Download RAW message or body]
On Mar 10, 2021, at 8:05 PM, Braden McGrath <braden@big-geek.net> wrote:
> Your comment got me to re-inspect more carefully, and I found where
> the problem was. I read through much of radiusd.conf when first
> setting things up, and I thought, "I don't need to proxy anything to
> other servers, this is all local!" so I changed "proxy_requests" to
> "no" and commented out "$INCLUDE proxy.conf", and I did this a week
> ago. I just now saw that the debug output wasn't reading proxy.conf,
> and after I poked around I realized I shot myself in the foot. Insert
> facepalm.jpg here.
Yup. :)
> Presumably I *could* be setting up realms in a separate (dedicated)
> file and just $INCLUDE'ing that instead? But for future maintenance's
> sake / standardization, I'll just stick to this... it's not really
> hurting me to leave things close to default state.
Sure. The various config files are brought in via $INCLUDE, so the content can be \
anywhere. We just separate them out into different files for sanity and management \
simplicity.
> If *non-regex* realm names are *supposed* to be case-sensitive within
> proxy.conf, they certainly aren't behaving that way.
Hmm... just checked again. Yes, they're case insensitive. DNS names and all that.
> That is exactly how it dies - a # and then a copy of the duplicated
> "realm X" line, and the process is gone.
It exits with an error (do "echo $?", and you'll see a non-zero exit code).
But yes, it should print an error. I've pushed a fix with a descriptive error \
message.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic