Hi, is it possible to configure an instant reject for a certain realm (in proxy.conf)? I'd like to set this for the NULL realm to disable usernames without a suffix. (any other suggestion to accomplish this is welcomed too!) Thanks! -- /--------------------------------------------- | Jan "Velpi" Van der Velpen | Velpi@industria.be || +32 (0) 498 61 24 89 \---------------------------------------------
Velpi wrote:
is it possible to configure an instant reject for a certain realm
Yes.
(in proxy.conf)?
No. The "proxy.conf" file defines realms, home servers, etc. It contains no directives for processing requests.
I'd like to set this for the NULL realm to disable usernames without a suffix. (any other suggestion to accomplish this is welcomed too!)
You can put this into the "authorize" section, after the "realm" modules: if (Realm == NULL) { reject } Alan DeKok.
is it possible to configure an instant reject for a certain realm I'd like to set this for the NULL realm to disable usernames without a suffix. (any other suggestion to accomplish this is welcomed too!)
You can put this into the "authorize" section, after the "realm" modules:
if (Realm == NULL) { reject }
" Mon Jul 5 13:53:47 2010 : Info: ++? if (Realm == NULL) Mon Jul 5 13:53:47 2010 : Info: (Attribute Realm was not found) " If I use expansion: " Mon Jul 5 13:57:39 2010 : Info: ++? if ("%{Realm}" == NULL) Mon Jul 5 13:57:39 2010 : Info: expand: %{Realm} -> Mon Jul 5 13:57:39 2010 : Info: ? Evaluating ("%{Realm}" == NULL) -> FALSE Mon Jul 5 13:57:39 2010 : Info: ++? if ("%{Realm}" == NULL) -> FALSE " Can I do expansion from a certain module that will provide Realm? How do I find out which modules can provide which variables? Thanks! -- /--------------------------------------------- | Jan "Velpi" Van der Velpen | Velpi@industria.be || +32 (0) 498 61 24 89 \---------------------------------------------
Velpi wrote:
Mon Jul 5 13:53:47 2010 : Info: ++? if (Realm == NULL) Mon Jul 5 13:53:47 2010 : Info: (Attribute Realm was not found)
1) You are not running in debugging mode as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list. 2) You are not posting the full debug output as suggested in all of those places 3) You did not follow my instructions. If you had followed them, it would have worked.
Can I do expansion from a certain module that will provide Realm?
The "realms" module provides the Realm. That's why I told you to place that config section after the "realms" module.
How do I find out which modules can provide which variables?
Read the messages on this list. Alan DeKok.
My apologies, I tried to be concise but I now realize that I shouldn't. The "realms" module is referenced as "suffix" in my (default) config, so I didn't notice I forgot to include that module in one of the server configs. I included the realm module before that condition and indeed now it works. Thanks you! On 5/07/2010 14:06, Alan DeKok wrote:
Velpi wrote:
Mon Jul 5 13:53:47 2010 : Info: ++? if (Realm == NULL) Mon Jul 5 13:53:47 2010 : Info: (Attribute Realm was not found)
1) You are not running in debugging mode as suggested in the FAQ, README, INSTALL, "man" page, and daily on this list.
2) You are not posting the full debug output as suggested in all of those places
3) You did not follow my instructions. If you had followed them, it would have worked.
Can I do expansion from a certain module that will provide Realm?
The "realms" module provides the Realm. That's why I told you to place that config section after the "realms" module.
How do I find out which modules can provide which variables?
Read the messages on this list.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- /--------------------------------------------- | Jan "Velpi" Van der Velpen | Velpi@industria.be || +32 (0) 498 61 24 89 \---------------------------------------------
participants (2)
-
Alan DeKok -
Velpi