Hello all I didn't get any response the first time I sent this so I'm trying again. Any chance of having such a feature implemented? Sincerely, Martin Zuziak <zuziak@math.ku.dk> PS: Don't worry, if I don't get any answer this time, I'll shut up :) ----- Forwarded message from Martin Zuziak <zuziak@math.ku.dk> ----- Date: Thu, 1 Jun 2006 10:34:19 +0200 From: Martin Zuziak <zuziak@math.ku.dk> To: freeradius-users@lists.freeradius.org Subject: Filter attributes when proxying Hello all Is it possible to (easily) remove single attributes sent or received when proxying? I know it can be done with attr_filter but if you only want to remove a single attribute while leaving the rest untouched, you need pass rules for every other attribute. It doesn't look like attr_rewrite can remove attributes. Am I wrong? Otherwise I think this would be a nice feature to implement. The attr_filter module can easily (I think) be changed to include a variable to control whether or not passing rules are needed to allow an attribute. Currently attributes are only allowed if they don't fail any rules in attrs and pass at least one rule: if (fail == 0 && pass > 0) This could be changed to something like if (fail == 0 && (pass > 0 || allow_no_match)) where a variable in the attrs file could control if passing rules are required. Sincerely, Martin Zuziak <zuziak@math.ku.dk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ----- End forwarded message -----
try to use rlm_policy I am sure there are other ways. Martin Zuziak wrote:
Hello all
I didn't get any response the first time I sent this so I'm trying again.
Any chance of having such a feature implemented?
Sincerely,
Martin Zuziak <zuziak@math.ku.dk>
PS: Don't worry, if I don't get any answer this time, I'll shut up :)
----- Forwarded message from Martin Zuziak <zuziak@math.ku.dk> -----
Date: Thu, 1 Jun 2006 10:34:19 +0200 From: Martin Zuziak <zuziak@math.ku.dk> To: freeradius-users@lists.freeradius.org Subject: Filter attributes when proxying
Hello all
Is it possible to (easily) remove single attributes sent or received when proxying? I know it can be done with attr_filter but if you only want to remove a single attribute while leaving the rest untouched, you need pass rules for every other attribute.
It doesn't look like attr_rewrite can remove attributes. Am I wrong?
Otherwise I think this would be a nice feature to implement. The attr_filter module can easily (I think) be changed to include a variable to control whether or not passing rules are needed to allow an attribute.
Currently attributes are only allowed if they don't fail any rules in attrs and pass at least one rule:
if (fail == 0 && pass > 0)
This could be changed to something like if (fail == 0 && (pass > 0 || allow_no_match))
where a variable in the attrs file could control if passing rules are required.
Sincerely,
Martin Zuziak <zuziak@math.ku.dk>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
----- End forwarded message -----
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, Jun 19, 2006 at 11:16:17AM -0400, Joe Maimon wrote:
try to use rlm_policy I am sure there are other ways.
Thank you for your answer. I hadn't seen the policy module. It only seems to be in CVS not in the releases. Is there a reason for that? Is it not of production quality? Sincerely, Martin Zuziak <zuziak@math.ku.dk>
Martin Zuziak wrote:
On Mon, Jun 19, 2006 at 11:16:17AM -0400, Joe Maimon wrote:
try to use rlm_policy I am sure there are other ways.
Thank you for your answer.
I hadn't seen the policy module. It only seems to be in CVS not in the releases. Is there a reason for that? Is it not of production quality?
Sincerely,
Martin Zuziak <zuziak@math.ku.dk>
I use it for production, with a couple patches. You can try checking my deb packages for more information http://www.jmaimon.com/freeradius This is likely the hard way.
participants (2)
-
Joe Maimon -
Martin Zuziak