<HTML>
<HEAD>
<TITLE>Re: Defining an Auth-Type based on a realm</TITLE>
</HEAD>
<BODY>
<FONT FACE="Arial"><SPAN STYLE='font-size:9pt'>Ah, I was misunderstanding the proxy functionality. I thought it was only used for proxying radius requests to other radius servers.<BR>
<BR>
I was having a problem with configuring the users file. Why will this set Auth-Type:<BR>
<BR>
DEFAULT Realm == "realm", Auth-Type := Kerberos<BR>
<BR>
And this will not:<BR>
<BR>
DEFAULT Realm == "realm"<BR>
Auth-Type := Kerberos<BR>
<BR>
<BR>
Looking through the examples in the users file, it seems like it should (assuming the examples work):<BR>
DEFAULT Hint == "SLIP"<BR>
Framed-Protocol = SLIP<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"><B>From: </B>Alan DeKok <<a href="aland@deployingradius.com">aland@deployingradius.com</a>><BR>
<B>Reply-To: </B>FreeRadius users mailing list <<a href="freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><BR>
<B>Date: </B>Tue, 12 Oct 2010 10:28:35 -0400<BR>
<B>To: </B>FreeRadius users mailing list <<a href="freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a>><BR>
<B>Subject: </B>Re: Defining an Auth-Type based on a realm<BR>
<BR>
Mathew Rowley wrote:<BR>
> My question was more of where that configuration should live. I can see<BR>
> that you can do attribute checks in the users file, but I am not sure<BR>
> the realm is being set to any attribute...<BR>
<BR>
Read the debug output. The realm isn't being set because you didn't<BR>
define one.<BR>
<BR>
<BR>
> Tue Oct 12 07:38:54 2010 : Info: [suffix] Looking up realm "realm" for<BR>
> User-Name = " user@realm"<BR>
> Tue Oct 12 07:38:54 2010 : Info: [suffix] No such realm "realm"<BR>
<BR>
Well.. that should be pretty obvious.<BR>
<BR>
> But I never see an attribute being set to the realm. Do I have to<BR>
> explicitly define that somewhere in order to do a check in the users<BR>
> file? Or, is there a better place to do this check (possibly in an IPASS<BR>
> configuration of suffix configuration)?<BR>
<BR>
See raddb/proxy.conf for documentation on configuring realms.<BR>
<BR>
Alan DeKok.<BR>
-<BR>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><BR>
<BR>
</SPAN></FONT>
</BODY>
</HTML>