high level design question

Matthew Newton mcn at freeradius.org
Fri Oct 14 12:49:05 UTC 2022


On 14/10/2022 01:36, Matt Zagrabelny via Freeradius-Users wrote:
>>          and then do:
>>
>>          if ("%{client:group}" == "group1") {
>>                  ... proxy to server1
>>          }
>>          elsif ("%{client:group}" == "group2") {
>>                  ... proxy to server2
>>          }
> 
> Cool. I suppose I was overengineering the design thinking that there might
> be more than one application on a host where app1 wants single factor auth
> and app2 wants two factor auth.

If that were the case you'd need to look at the incoming attributes in 
the packet and use something there to determine what destination to 
proxy to.

-- 
Matthew


More information about the Freeradius-Users mailing list