Freeradius proxy: rewriting response messages

Ivan Kalik tnt at kalik.net
Thu May 8 15:45:40 CEST 2008


Read the description of unlang:

http://www.freeradius.org/radiusd/man/unlang.html

Ivan Kalik
Kalik Informatika ISP


Dana 8/5/2008, "Simone Vendemia" <metal at cuneo.linux.it> piše:

>On Wed, May 7, 2008 at 10:19 PM, Alan DeKok <aland at deployingradius.com> wrote:
>>   See the "rewrite" module in radiusd.conf.
>>
>>   In 2.0, you can update any attribute using "unlang".
>>
>>  post-proxy {
>>         ...
>>         if (proxy-reply:Framed-IP-Address) {
>>                 update proxy-reply {
>>                         Framed-IP-Address := 1.2.3.4
>>                         ...
>>                 }
>>         }
>>  }
>>
>>   Alan DeKok.
>>
>
>Thank you for the really useful information. We're now migrating to
>2.0 in order to use that feature.
>Could be possible to have the new Framed-IP-Address automatically
>selected by querying the freeradius sql database?
>For example, now our correct values for  Framed-IP-Address and
>Framed-Route are located in the table radreply:
>mysql> select * from radreply;
>+----+----------+-------------------+----+-------------------------------+
>| id | UserName | Attribute         | op | Value                         |
>+----+----------+-------------------+----+-------------------------------+
>| 19 | denisio  | Framed-Route      | += | 192.168.37.0/24 10.4.8.1/32 1 |
>| 11 | test    | Framed-IP-Address | =  | 10.4.8.14                     |
>| 20 | denisio  | Framed-IP-Address | =  | 10.4.8.12                     |
>| 18 | denisio  | Framed-Route      | += | 192.168.36.0/24 10.4.8.1/32 1 |
>+----+----------+-------------------+----+-------------------------------+
>It would be really useful to have the route and ip address rewritten
>depending on the username, but trying with sql queries directly placed
>as an argument for "Framed-IP-Address :=" in update proxy-reply it's
>not really working actually :-)
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>




More information about the Freeradius-Users mailing list