Removing attributes from a reply
I need to remove an A/V from the reply list, but only if another A/V is already there. For example: If I have the Framed-IP-Address attribute, I need to remove any attribute of Cisco-AVPair -~ "ip:addr-pool.*" (because my NAS's will choke on that and that means I have no way for a fall back pool to be defined by radius for my proxy users who may/are assigned IP addresses by my customer) This needs to be done post-proxy stage for my needs. I have been assuming I would need the new CVS head policy feature for this. Anything I am missing? Joe
Joe Maimon <jmaimon@ttec.com> wrote:
If I have the Framed-IP-Address attribute, I need to remove any attribute of
Cisco-AVPair -~ "ip:addr-pool.*"
rlm_attr_filter? I think that might work.
I have been assuming I would need the new CVS head policy feature for this.
Maybe. Then again, the module isn't quite finished. Alan DeKok.
Joe Maimon wrote:
I need to remove an A/V from the reply list, but only if another A/V is already there. This needs to be done post-proxy stage for my needs.
rlm_attr_filter can do it -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: thor.spruyt@telenet.be W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be
Thor Spruyt wrote:
Joe Maimon wrote:
I need to remove an A/V from the reply list, but only if another A/V is already there. This needs to be done post-proxy stage for my needs.
rlm_attr_filter can do it
I have read the docs, I user rlm_attr_filter already, but I dont see how I can test for existence of Attribute X and if exists, remove attribute Y (using rlm_attr_filter -- I am sure there are other things I could try....such as rlm_perl(?) sending all A/V to a shell script.......) Do you have an example? Thanks, Joe
Joe Maimon wrote:
I can test for existence of Attribute X and if exists, remove attribute Y (using rlm_attr_filter -- I am sure there are other things I could try....such as rlm_perl(?) sending all A/V to a shell script.......)
rlm_perl should be able to do it, but you'll need the latest CVS version -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: thor.spruyt@telenet.be W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be
participants (3)
-
Alan DeKok -
Joe Maimon -
Thor Spruyt