Ivan, Thank You for the link to the proxy page. Unfortunately I am new to radius and have not been able to get it figured out. I have freeradius running on a Debian server. There is an entry in the proxy.conf file that states it was added to strip out domain; Realm DEFAULT { Type =radius Authhost = LOCAL Accthost = LOCAL } I am not sure where, relative to this entry, I need to add the entry for the other domain to forward authentication. I have not found any documentation that explains more detail about the proxy.conf file. If anyone can give me an explanation of how to do this or provide a link to a site that explains more about the proxy.conf file I would appreciate it. Thanks again. Warren -----Original Message----- From: freeradius-users-bounces+wmaurer=redred.com@lists.freeradius.org [mailto:freeradius-users-bounces+wmaurer=redred.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Wednesday, August 08, 2007 4:31 PM To: FreeRadius users mailing list Subject: Re: redirect authentication to a different radius box based on userdomain http://wiki.freeradius.org/Proxy Ivan Kalik Kalik Informatika ISP Dana 8/8/2007, "Warren Maurer" <wmaurer@redred.com> piše:
Does anyone know of a way to authenticate most users locally, but redirect some users to another radius server for authentication based on the login domain name specified by the user? I am using FreeRadius on a Debian box. Local authentication works properly, but I need to have some users authenticate from a different system based on the domain they are trying to log into. Any help is greatly appreciated.
I tried DEFAULT Suffix =~ "@abc.com$", Auth-Type := Accept and it still tries to authenticate locally
/etc/radius/users;
# for abc.com domain
DEFAULT Suffix =~ "@abc.com$", Auth-Type := Accept
Service-Type = Outbound-User,
Cisco-AVPair = "vpdn:ip-addresses=1.2.3.4",
Cisco-AVPair += "vpdn:tunnel-type=l2tp"
Warren
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html