FreeRADIUS 3.0.1 [Proxy To Another Radius if Reject Received]

Ibrahim Almahfooz ibrahim.nezar at gorannet.net
Mon Jul 11 19:10:04 CEST 2016


 Let's say our idea is wrong, impossible and bad.

If the server can not do it by unlang, is there any module or any
workaround for such a thing (Proxy rejected packets)?


On 11 July 2016 at 18:35, Alan DeKok <aland at deployingradius.com> wrote:

> On Jul 11, 2016, at 10:56 AM, Ibrahim Almahfooz <
> ibrahim.nezar at gorannet.net> wrote:
> > Thank you Alan for your answer however I will be waiting for Stefan help
> regarding the other method. We need such a setup to be implemented
> temporary for two-three months then we will remove it.
>
>   The server cannot turn a Reject into a proxied packet via unlang.
>
>   It doesn't matter if the setup is temporary.  Your requirements are
> based on bad ideas about security.  Your design is wrong.  It adds
> complexity, and doesn't add security.
>
>   What you want to do is impossible.  Fix your design to follow the
> recommendations given on this list.
>
>   Alan DeKok.
>
>


--


More information about the Freeradius-Users mailing list