Add+cnadge attributes to proxy-reply with condition
Hello, I need to modify proxy-reply auth packet with condition. All i need - if proxy user enter UserName like 'username#554466' send UserName like 'username' to proxy (its already work) and check proxy-reply - if it consist av-pair Ascend-CBCP-Mode=CBCP-Any-Or-No changer this pair value to CBCP-Profile-Callback and add new attribute - Ascend-Dial-Number with value after # in original UserName and send modified packet to NAS. Now it work unconditional and stupid Lucent MAX trying dial-out to users who dont have permition for it. My current settings: preproxy_users: DEFAULT User-Name =~ "^([a-z0-9_\-]+)#([0-9]+)$" User-Name := "%{1}" proxy.conf: post_proxy_authorize = yes users: DEFAULT Stripped-User-Name =~ "#([0-9]+)$" Ascend-Dial-Number = "%{1}", Ascend-CBCP-Mode := CBCP-Profile-Callback I need something like in users: DEFAULT Stripped-User-Name =~ "#([0-9]+)$", %{proxy-reply:Ascend-CBCP-Mode} == CBCP-Any-Or-No Ascend-Dial-Number = "%{1}", Ascend-CBCP-Mode := CBCP-Profile-Callback Thanx! -- Best regards, Victor mailto:kha0s@ukr.net
Victor wrote:
proxy.conf:
post_proxy_authorize = yes
In the CVS head you can use postproxy_users file, which is a much better solution. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Victor