Re: Attributes sent to proxy servers ...




Never mind ...

++[sql] returns ok
  expand: %{User-Name} -> ac221@loopback.sussex.ac.uk
attr_filter: Matched entry DEFAULT at line 12
++[attr_filter.accounting_response] returns updated

*sigh*

All works now.

Might be any idea to replace
accounting {
   ...
   #  Filter attributes from the accounting response.
   attr_filter.accounting_response
}

With
accounting {
   ...
   #  Filter attributes from the accounting response.
   if(!"%{control:Proxy-To-Realm}"){
       attr_filter.accounting_response
   }
}

In the default config, or create a Post-Acct section for the filter to live in. Else all proxied accounting requests will have their attributes stripped out.

Still getting internal attributes displayed...

Sending Accounting-Request of id 206 to 194.82.174.185 port 1813
   Acct-Session-Id = "004E0000001B"
   Acct-Status-Type = Start
   Acct-Authentic = RADIUS
   Acct-Delay-Time = 0
   NAS-Port = 1
   Calling-Station-Id = "001B63A3A8DD"
   Event-Type = Framed-User
   NAS-IP-Address = 139.184.8.16
   NAS-Identifier = "hp-e-its-dev8021x-sw1"
   User-Name = "ac221@loopback.sussex.ac.uk"
   Stripped-User-Name = "ac221@loopback.sussex.ac.uk"
   Realm = "jrs"
   Acct-Unique-Session-Id = "98c00d277000c63a"
   SQL-User-Name = "ac221@loopback.sussex.ac.uk"
   Realm = "jrs"
   Proxy-State = 0x323532

--
Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk)
Authentication, Authorisation and Accounting Officer
Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton
EXT:01273 873900 | INT: 3900





This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.