post-auth problem after update from 2.0.4 to 2.1.10

Gerald Krause gk at ax.tc
Mon Apr 16 22:00:03 CEST 2012


Am 16.04.2012 21:22, schrieb Alan DeKok:
> Gerald Krause wrote:
>> after upgrading our server from 2.0.4 to 2.1.10
> 
>   Please use 2.1.12.  It's better.

I'll check that suggestion. In the moment this is a plain "apt-get
install/update/upgrade" Debian box that comes with 2.1.10 (don't blame
me...) but maybe I'am going to install freeradius from scratch somewhat
later.

>> we see a change in the
>> auth logic - e.g. when processing proxied requests to a home server and
>> their replies. We need this feature to append some special attributes to
>> the accept-packet from the home server before sending it to the NAS.
> 
>   Yes.  The "post-proxy authorize" functionality has been removed.  It
> was horrible and unnecessary.

o-kay

> 
>> users file:
>> ===========
>> DEFAULT	User-Name =~ "test at foo"
>> 	MS-Primary-DNS-Server = "192.168.203.6",
>> 	MS-Secondary-DNS-Server = "192.168.203.1",
>> 	MS-Primary-NBNS-Server = "192.168.203.6"
> 
>   You can just list "files.authorize" in the "post-proxy" section.  It
> will run the "users" file, add those attributes.

Great, that did the trick for me!

Thank you Alan,
Gerald



More information about the Freeradius-Users mailing list