RE: [RadiusNT] Proxy Radius problem

Dale E. Reed Jr. ( (no email) )
Fri, 26 Jul 2002 12:41:24 -0700

> Now the crux of the problem is that RadiusNT is forwarding ALL
> full domain
> logins to our GRIC roaming server, even though we've configured specific
> domains to be handled locally.

Well, actually, you're telling RadiusNT to send all proxy
requests to GRIC. See below. :)

> RadRoamDomains Table
> --------------------------
> RadRoamDomainID RadRoamServerID Domain Priority
> --------------- --------------- ------------------------ -----------
> 2 3 maindomain.com 2
> 3 2 DEFAULT 1
> 4 3 anotherdomain.com 2
> 5 3 stillmore.com 2
> 6 3 youguessedit.com 2
> 7 3 domainsrus.com 2
> 8 3 sickofthisalready.com 2
> 9 3 hurrahthelastone.com 2
> 11 4 vispdomain.net 2
> 12 4 anothervispdomain.net 2
>
> Actual domain data has obviously been changed to protect the innocent.
>
> So, has anyone got any ideas about this? It's really annoying.

You have your priorities backwards. This is from the RadiusNT/X
docs on roaming:

--------------------------------------------------------------
There are several options for configuring the roaming feature
in the two above noted tables, RadRoamServers and RadRoamDomains.
One of the more useful options is the default domain. If you
define a domain as "DEFAULT", RadiusNT/X will send to it all
roaming requests that do not have a matching domain. However,
you must make sure the priority for the DEFAULT domain is
higher than all other domains you have listed.

Any domain that has a higher priority than the default domain
will be sent to the default domain. The first domain matching
the users's domain (or the DEFAULT entry) with the lowest
priority is the one used.
--------------------------------------------------------------

Just for clarification, lowest priority = 0. Higher priority would
be like 255. Set your DEFAULT priority above to 255 and then
restart RadiusNT. That should fix it.

------------

This is a user supported list. If you require assistance from IEA Software's
Support Engineers, please check out our Support resources at
http://www.iea-software.com/support.

For more information about this list (including removal) go to:
http://www.iea-software.com/support/maillists/liststart