Re: Issue with dynamic home server and duplicate server ipaddr on 3.2.8

Alan DeKok via Freeradius-Users <[email protected]> Tue, 17 Mar 2026 00:42:18 -0400
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>
On Mar 16, 2026, at 4:29 PM, James Wood via Freeradius-Users <[email protected]> wrote:
> ...
> However, this failed to add via radmin, because the "ipaddr" is the same as
> a previously defined dynamic home server, and the authentication fails as
> it doesn't proxy the request.

  The existing scripts are set up to tie one domain to one home server.  As you've seen, they need updating to work with more complex situations.

> It's like we need a way to set servers and then map multiple realms to the
> same server (as traditionally done in proxy.conf)?
> 
> How can we best solve this issue? Is there another method for doing this
> besides the one above?

  Off of the top of my head, you'll have to define home servers by IP address, and not domain name.  i.e. do the IP address lookup in the shell script, and then write out home server name / ipaddr which the actual IPv4 address.

  Then separately, have a mapping of realms to IP addresses.  That mapping can go into a database, for example.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=FrXP
-----END PGP SIGNATURE-----