post-auth problem after update from 2.0.4 to 2.1.10

Alan DeKok aland at
Mon Apr 16 21:22:56 CEST 2012

Gerald Krause wrote:
> after upgrading our server from 2.0.4 to 2.1.10

  Please use 2.1.12.  It's better.

> we see a change in the
> auth logic - e.g. when processing proxied requests to a home server and
> their replies. We need this feature to append some special attributes to
> the accept-packet from the home server before sending it to the NAS.

  Yes.  The "post-proxy authorize" functionality has been removed.  It
was horrible and unnecessary.

> users file:
> ===========
> DEFAULT	User-Name =~ "test at foo"
> 	MS-Primary-DNS-Server = "",
> 	MS-Secondary-DNS-Server = "",
> 	MS-Primary-NBNS-Server = ""

  You can just list "files.authorize" in the "post-proxy" section.  It
will run the "users" file, add those attributes.

  Alan DeKok.

More information about the Freeradius-Users mailing list