radius proxy senario

tnt at kalik.net tnt at kalik.net
Sat Mar 7 09:53:48 CET 2009


>Condition:
>
>1. I have a local realm (suffix), xyz.com. I'm using freeradius 2.1.3+mysql.
>
>2. My own user's username in mysql radcheck table is store in username at xyz.com format
>
>3. A person want me to proxy his prefix ABC/his-customer-username at myrealm to his radius server, i.e: ABC/his-customer-username at xyz.com
>

That is wrong. His customers should use ABC/his-customer-username only,
not have @xyz.com as well.

>4. The proxy has strip both prefix and suffix, which means when ABC/his-customer-username at xyz.com auth request come in, i have to forward only his-customer-username to his radius.
>

If you don't have to deal with @xyz.com at the end it works by default.
Change instructions for his users. They shouldn't append your domain as
well. Only his prefix.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list