Re: rlm_attr_filter

Josip Almasi wrote:

I need to remove some attributes from the reply(*). Attr_filter does that only for proxy responses. So I wrote it: I added another parameter to attr_filter config, filterlocal, defaults to 'no'. Once you set it to 'yes' it filters locally originated attributes too.

It doesn't really matter if there're too much attributes during authorize. I think deleting unwanted attributes in the reply packet should be done in post-auth. (filtering the reply packet in post-auth will work on both proxied and local realms) See rlm_attr_filter.c in a nightly CVS snapshot, it can be run from the post-auth section. -- Nicolas Baradakis