<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
Hello,</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
I have two clients that proxy access requests to me. The realm varies, but the format is always userid@realm.whatever</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
Is there a way that I can deny a specific realm when an access request is received from a specific client?</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
I tried adding something to policy.conf but I couldn't get the syntax right:</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<span style="font-family: Monda, 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 13px; line-height: 22px; text-align: left; background-color: rgb(255, 255, 255); ">#Prevent secretrealm from logging in off-campus </span></div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<span style="font-family: Monda, 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 13px; line-height: 22px; text-align: left; background-color: rgb(255, 255, 255); ">remote_secret_reject </span></div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<span style="font-family: Monda, 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 13px; line-height: 22px; text-align: left; "><span class="Apple-tab-span" style="white-space: pre; "></span>if ("%{Realm}" == "secretrealm.ca") && ((Client-Shortname
== "proxy-client1") || (Client-Shortname == "proxy-client2"))) { </span></div>
<div><span style="text-align: left; "><span class="Apple-tab-span" style="color: rgb(0, 0, 0); font-family: Monda, 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 13px; line-height: 22px; white-space: pre; "></span>r<font face="Monda,Helvetica Neue,Arial,Helvetica,sans-serif"><span style="font-size: 13px; line-height: 22px;">eject</span></font></span></div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<span style="font-family: Monda, 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 13px; line-height: 22px; text-align: left; "><span class="Apple-tab-span" style="white-space:pre"></span> }</span></div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
Is there a different way that I should be doing this?</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
Thanks,</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
Dave</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas, sans-serif; font-size: 12px; ">
<div>
<div style="font-family: Consolas; font-size: medium; ">Dave Aldwinckle</div>
<div style="font-family: Consolas; font-size: medium; ">Network Support Specialist</div>
<div style="font-family: Consolas; font-size: medium; ">Information Systems and Technology</div>
<div style="font-family: Consolas; font-size: medium; ">Phone: (519)-888-4567 ext. 31145</div>
<div style="font-family: Consolas; font-size: medium; ">E-Mail: <a href="mailto:daldwinc@uwaterloo.ca">daldwinc@uwaterloo.ca</a></div>
</div>
<br>
</div>
</body>
</html>