Re: Local Auth if Proxy Auth fails ---OR--- Proxy Auth if Local Auth fails

7 Oct 2011

      Яцко Эллад Геннадьевич (ngs) wrote:
...
1) NAS -> FreeRADIUS: User/Password
2) FreeRADIUS - Does User exist in Local DB?
authorize {
	...
	ldap
	if (!notfound) {
		update control {
			Proxy-To-Realm := "realm"
		}
	}
	...
}

  And set up the realm with home server, etc.
...
3) If "yes" - Access-Acept!
4) If "no" - Are any Proxies configured? FreeRADIUS -> Proxy: User/Password
5) Proxy answers, FreeRADIUS translates the answer further to NAS.
All of the rest happens automatically.

  Alan DeKok.