if anyone is interested - we did it like this: attr_filter file adds an attribuet because it can distinguish realms attr_rewrite macthes and rewrites in post_proxy seems to work fine. -----Original Message----- From: freeradius-users-bounces@lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Joe Maimon Sent: 01 November 2005 12:53 To: FreeRadius users mailing list Subject: Re: appending to a proxy reply attribute Tariq Rashid wrote:

hi - i would like to achieve the following:

* inspect the reply packet from a proxy target radius

* if the reply contains "Framed-Route", for example Framed-Route = 195.40.42.96/30 83.67.214.162 1 then append a string to the value: Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001

* NOTE that the appended string depends on the realm/domain so possibilities are: for username a@ABC.com Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001

for username b@XYZ.com Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-XYZ-001

how is this possible with freeradius 1.0.2?

tariq

Well one possible way that occurs to me would be to use an external program with the exec module. attr_rewrite would do it except it seems that you need to check other attributes. rlm_policy would do it, except I dont know about its ability to APPEND to an existing attribute.... Were I you I would also check rlm_perl, something I have never actually done. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html