Deleting reply items before post-proxy

Alan DeKok aland at deployingradius.com
Sat Sep 1 14:02:30 CEST 2007


Arran Cudbard-Bell wrote:
> I have to confess I had assumed the proxy behaviour was to allow reply
> attributes set in the authorise section to be sent on successful
> authentication by the home server, and structured my configuration to
> take advantage of this (as it seemed the logical way for things to work).

  That can be done... but it's still a little wrong.

> So repeat plea for configuration option to allow the original reply to
> be combined with the *heavily filtered* reply from server.

  That can be done.  But the post-proxy-authorize configuration will NOT
be re-added.  It's indescribably wrong, and breaks things.

  Alan DeKok.



More information about the Freeradius-Devel mailing list