<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hey thanks! :)<br></span></div><div><br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><font size="2" face="Arial"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Phil Mayers <p.mayers@imperial.ac.uk><br><b><span style="font-weight: bold;">To:</span></b> freeradius-users@lists.freeradius.org<br><b><span style="font-weight: bold;">Sent:</span></b> Thursday, September 1, 2011 10:04 PM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: Proxying Based on Criteria Other Than REALM<br></font><br>On 01/09/11 14:53, <a ymailto="mailto:det.explorer@yahoo.com" href="mailto:det.explorer@yahoo.com">det.explorer@yahoo.com</a> wrote:<br><br>>> Hi,<br>>> <br>>>
Is it possible to proxy based on a group the user belongs to? Or<br>>> attribute? Or based on NAS from where the request was received?<br>>> <br>>> Aside from REALM, is there any other criteria that can be used to<br>>> decide whether or not to proxy a request?<br><br>There are two attributes:<br><br> 1. "Realm"; added to the request by e.g. the "suffix" module. Doesn't actually do anything; just used for logging.<br><br> 2. "Proxy-To-Realm"; added to the "control" items by the "suffix" module, or by other config. This is what actually controls proxying.<br><br>So for example you can do this:<br><br>authorize {<br> ...<br> if (NAS-IP-Address == 192.0.2.1) {<br> update control {<br> Proxy-To-Realm := OTHERSERVER<br> }<br> }<br> ...<br>}<br><br>As you can see, you can therefore proxy on any attribute you like, or even on the output of a script, SQL query,
etc.<br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br><br><br></div></div></div></body></html>