<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-2" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Ok this is for anybody else out there having the same question I have
regarding this.<br>
There is no clear way to separate between which requests (from or to
home servers/post-proxy or pre-proxy). So I tried this with success:<br>
<br>
Add this to the radiusd.conf, I added this under the "attr_filter {"
line, which is part of the "Modules" section in the config file.<br>
attr_filter preproxy_attrfilter {<br>
attrsfile = ${confdir}/preproxy_attrfilter<br>
}<br>
<br>
Then under the pre-proxy section before the "files" line add a line
"preproxy_attrfilter", Or before any custom auth stuff you have in
there. (example:)<br>
pre-proxy {<br>
preproxy_attrfilter<br>
files<br>
pre_proxy_log<br>
}<br>
<br>
Then add the filters into the file preproxy_attrfilter in
/etc/freeradius or whatever your config directory is called.<br>
<br>
example:<br>
<br>
REALM-HERE.com<br>
NAS-IP-Address := xx.xx.xx.xx,<br>
User-Name =* ANY,<br>
User-Password =* ANY,<br>
Calling-Station-Id =* ANY<br>
<br>
<br>
Thanks,<br>
Mike<br>
<br>
Ivan Kalik wrote:
<blockquote cite="mid:hmaoOp5r.1215441392.9403950.tnt@kalik.co.yu"
type="cite">
<pre wrap="">Because the example is for one in post-proxy section. Try reading again:
<a class="moz-txt-link-freetext" href="http://freeradius.org/radiusd/man/rlm_attr_filter.html">http://freeradius.org/radiusd/man/rlm_attr_filter.html</a>
Ivan Kalik
Kalik Informatika ISP
Dana 7/7/2008, "Michael da Silva Pereira" <a class="moz-txt-link-rfc2396E" href="mailto:michael@tradepage.co.za"><michael@tradepage.co.za></a>
piše:
</pre>
<blockquote type="cite">
<pre wrap="">Hi there,
It seems this only affects replies from the Home Server going to my NAS.
"
# attr_filter - filters the attributes received in replies from
# proxied servers, to make sure we send back to our RADIUS client
# only allowed attributes.
attr_filter {
attrsfile = ${confdir}/attrs
}
"
I want to filter extra attributes sent from the NAS to the Home Server
basically.
Thanks,
Mike
Ivan Kalik wrote:
</pre>
<blockquote type="cite">
<pre wrap="">It does tend to filter attributes when you use attribute filter ;-)
<a class="moz-txt-link-freetext" href="http://freeradius.org/radiusd/man/rlm_attr_filter.html">http://freeradius.org/radiusd/man/rlm_attr_filter.html</a>
<a class="moz-txt-link-freetext" href="http://wiki.freeradius.org/Attrs">http://wiki.freeradius.org/Attrs</a>
Ivan Kalik
Kalik Informatika ISP
Dana 7/7/2008, "Michael da Silva Pereira" <a class="moz-txt-link-rfc2396E" href="mailto:michael@tradepage.co.za"><michael@tradepage.co.za></a>
piše:
</pre>
<blockquote type="cite">
<pre wrap="">Hi All,
I am wondering if anybody has done this, I'm sure it's actually very
easy to do, But I'm just not able to get it done :(
I need to filter requests coming from my NAS going to my radius server
being forwarded to a clients radius server.
Now I am able to modify and update attributes, even add using
preproxy_users. but how on earth do I drop the attribute completely?
Currently in preproxy_users:
DEFAULT Realm == "testrealm.com"
NAS-IP-Address := 196.3.121.32,
User-Name =* ANY,
User-Password =* ANY
Other server still recieves:
3GPP2-Correlation-Id
Calling-Station-Id
Framed-Protocol
User-Name
User-Password
Service-Type
NAS-IP-Address
NAS-Identifier
Proxy-State
User-Password
Client-IP-Address
Kind regards,
Michael da silva Pereira
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/usershtml">http://www.freeradius.org/list/usershtml</a>
</pre>
</blockquote>
<pre wrap="">-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<pre wrap="">-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<pre wrap=""><!---->
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
</body>
</html>