Koozali.org: home of the SME Server

CoovaChilli redirect Radius to external radius server

Offline burdens

  • 4
  • +0/-0
CoovaChilli redirect Radius to external radius server
« on: March 24, 2009, 11:11:53 AM »
On the SME CoovaChilli site it lists some db commands to amend settings.
However, it seems not possible to change radiusserver1 and radiusserver2 settings to anything other than 127.0.0.1 .... see /etc/chilli.conf

I am trying to get the server to use an external radius server on local LAN.

Any ideas ?

Thanks

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: CoovaChilli redirect Radius to external radius server
« Reply #1 on: March 24, 2009, 11:50:26 AM »
Indeed, the radius server cannot be changed via DB commands, because it's not setting which will be customized very often. In you case, you can override the default radius server with a custom template:
Code: [Select]
mkdir -p /etc/e-smith/tempaltes-custom/etc/chilli.conf
vim /etc/e-smith/tempaltes-custom/etc/chilli.conf/50radius
and put womething like
Code: [Select]
radiusserver1 1.2.3.4
radiusserver2 5.6.7.8
radiussecret your_secret
radiusauthport 1812
radiusacctport 1813
radiusnasid nas_id
radiustimeout   3

then
Code: [Select]
signal-event chilli-update
C'est la fin du monde !!! :lol:

Offline burdens

  • 4
  • +0/-0
Re: CoovaChilli redirect Radius to external radius server
« Reply #2 on: March 24, 2009, 11:53:48 AM »
Got it working.

Removed chilli.conf from /etc/e-smith/events/chilli-update/templates2expand/etc
and manually altered /etc/chilli.conf using vi to replace 127.0.0.1 addresses with FreeRadius server addresses.

Works great using a FreeRadius server on local LAN.


Offline burdens

  • 4
  • +0/-0
Re: CoovaChilli redirect Radius to external radius server
« Reply #3 on: March 24, 2009, 11:56:09 AM »
Thanks.

My way works but obviously isn't an approved method.

I shall use the correct method detailed by VIP-ire.


Thanks

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: CoovaChilli redirect Radius to external radius server
« Reply #4 on: March 24, 2009, 11:56:56 AM »
Removed chilli.conf from /etc/e-smith/events/chilli-update/templates2expand/etc
and manually altered /etc/chilli.conf using vi to replace 127.0.0.1 addresses with FreeRadius server addresses.

This is really not clean. Please, use the custom template solution. Your modification will be overriden on upgrades or post-upgrade/reboot.
C'est la fin du monde !!! :lol: