rlm_ldap with pre and post proxy

[Arran Cudbard-Bell]

> On 17 Aug 2015, at 22:45, Peter Lambrechtsen <peter at crypt.co.nz> wrote:
> 
> Hello
> 
> I was wondering if there would be any complaints if the PRE_PROXY and
> POST_PROXY methods in the rlm_ldap module were added to call mod_authorize

Just use ldap.authorize (section override) in the virtual server.

If you *really* want to be able to call ldap in post-proxy, you can also do

policy {
	ldap.post-proxy {
		ldap.authorize
		# Special magic post-proxy things
	}
}

And then

post-proxy {
	ldap
}

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20150817/26267cb4/attachment.sig>