appending to a proxy reply attribute
hi - i would like to achieve the following: * inspect the reply packet from a proxy target radius * if the reply contains "Framed-Route", for example Framed-Route = 195.40.42.96/30 83.67.214.162 1 then append a string to the value: Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001 * NOTE that the appended string depends on the realm/domain so possibilities are: for username a@ABC.com Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001 for username b@XYZ.com Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-XYZ-001 how is this possible with freeradius 1.0.2? tariq
Tariq Rashid wrote:
hi - i would like to achieve the following:
* inspect the reply packet from a proxy target radius
* if the reply contains "Framed-Route", for example Framed-Route = 195.40.42.96/30 83.67.214.162 1 then append a string to the value: Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001
* NOTE that the appended string depends on the realm/domain so possibilities are: for username a@ABC.com Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001
for username b@XYZ.com Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-XYZ-001
how is this possible with freeradius 1.0.2?
tariq
Well one possible way that occurs to me would be to use an external program with the exec module. attr_rewrite would do it except it seems that you need to check other attributes. rlm_policy would do it, except I dont know about its ability to APPEND to an existing attribute.... Were I you I would also check rlm_perl, something I have never actually done.
participants (2)
-
Joe Maimon -
Tariq Rashid