FreeRADIUS 3.0.1 [Proxy To Another Radius if Reject Received]

Alan DeKok aland at deployingradius.com
Mon Jul 11 17:35:40 CEST 2016


On Jul 11, 2016, at 10:56 AM, Ibrahim Almahfooz <ibrahim.nezar at gorannet.net> wrote:
> Thank you Alan for your answer however I will be waiting for Stefan help regarding the other method. We need such a setup to be implemented temporary for two-three months then we will remove it.

  The server cannot turn a Reject into a proxied packet via unlang.

  It doesn't matter if the setup is temporary.  Your requirements are based on bad ideas about security.  Your design is wrong.  It adds complexity, and doesn't add security.

  What you want to do is impossible.  Fix your design to follow the recommendations given on this list.

  Alan DeKok.




More information about the Freeradius-Users mailing list