preproxy_users doesn't filter attributes
Michael da Silva Pereira
michael at tradepage.co.za
Mon Jul 7 16:16:00 CEST 2008
Hi there,
It seems this only affects replies from the Home Server going to my NAS.
"
# attr_filter - filters the attributes received in replies from
# proxied servers, to make sure we send back to our RADIUS client
# only allowed attributes.
attr_filter {
attrsfile = ${confdir}/attrs
}
"
I want to filter extra attributes sent from the NAS to the Home Server
basically.
Thanks,
Mike
Ivan Kalik wrote:
> It does tend to filter attributes when you use attribute filter ;-)
>
> http://freeradius.org/radiusd/man/rlm_attr_filter.html
>
> http://wiki.freeradius.org/Attrs
>
> Ivan Kalik
> Kalik Informatika ISP
>
>
> Dana 7/7/2008, "Michael da Silva Pereira" <michael at tradepage.co.za>
> piše:
>
>
>> Hi All,
>>
>> I am wondering if anybody has done this, I'm sure it's actually very
>> easy to do, But I'm just not able to get it done :(
>>
>> I need to filter requests coming from my NAS going to my radius server
>> being forwarded to a clients radius server.
>> Now I am able to modify and update attributes, even add using
>> preproxy_users. but how on earth do I drop the attribute completely?
>>
>> Currently in preproxy_users:
>> DEFAULT Realm == "testrealm.com"
>> NAS-IP-Address := 196.3.121.32,
>> User-Name =* ANY,
>> User-Password =* ANY
>>
>> Other server still recieves:
>> 3GPP2-Correlation-Id
>> Calling-Station-Id
>> Framed-Protocol
>> User-Name
>> User-Password
>> Service-Type
>> NAS-IP-Address
>> NAS-Identifier
>> Proxy-State
>> User-Password
>> Client-IP-Address
>>
>> Kind regards,
>> Michael da silva Pereira
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>>
>>
>>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>
More information about the Freeradius-Users
mailing list