hi - i after much searching the archives i couldn't find a good way to proxy to subdomains of a domain: user@xxx.yyy.zz.domain.com for any number of subdomains under a given domain.com (inlcuding nil). is this possible? (i don't want the username stripped) thanks tariq
Hi, I need doing 2 address pool to differents range's ip. I doing the follow in radiusd.conf ippool pool1 { # range-start,range-stop: The start and end ip # addresses for the ip pool range-start = 192.168.1.1 range-stop = 192.168.3.254 # netmask: The network mask used for the ip's netmask = 255.255.255.0 # cache-size: The gdbm cache size for the db # files. Should be equal to the number of ip's # available in the ip pool # cache-size = 800 # session-db: The main db file used to allocate ip's to clients session-db = ${raddbdir}/db.ippool # ip-index: Helper db index file used in multilink ip-index = ${raddbdir}/db.ipindex # override: Will this ippool override a Framed-IP-Address already set # override = no # maximum-timeout: If not zero specifies the maximum time in seconds an # entry may be active. Default: 0 # maximum-timeout = 0 } ippool pool2 { # range-start,range-stop: The start and end ip # addresses for the ip pool range-start = 192.168.11.1 range-stop = 192.168.11.254 # netmask: The network mask used for the ip's netmask = 255.255.255.0 # cache-size: The gdbm cache size for the db # files. Should be equal to the number of ip's # available in the ip pool # cache-size = 800 # session-db: The main db file used to allocate ip's to clients session-db = ${raddbdir}/db.ippool # ip-index: Helper db index file used in multilink ip-index = ${raddbdir}/db.ipindex # override: Will this ippool override a Framed-IP-Address already set # override = no # maximum-timeout: If not zero specifies the maximum time in seconds an # entry may be active. Default: 0 # maximum-timeout = 0 } but this not function, see the debug: Module: Loaded IPPOOL ippool: session-db = "/etc/raddb/db.ippool" ippool: ip-index = "/etc/raddb/db.ipindex" ippool: range-start = 192.168.1.1 IP address [192.168.1.1] ippool: range-stop = 192.168.3.254 IP address [192.168.3.254] ippool: netmask = 255.255.255.0 IP address [255.255.255.0] ippool: cache-size = 1000 ippool: override = no ippool: maximum-timeout = 0 Module: Instantiated ippool (pool1) only load the module pool1 and no pool2 thanks for all maybel ______________________________________________ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es
oh, i forget doing this totally thanks maybel --- Alan DeKok <aland@ox.org> escribió:
Maybel Rodriguez <maybel_80@yahoo.es> wrote:
only load the module pool1 and no pool2
List *both* pools in the "post-auth" section.
Alan DeKOk. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
______________________________________________ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es
oh, i forget doing this totally thanks maybel --- Alan DeKok <aland@ox.org> escribió:
Maybel Rodriguez <maybel_80@yahoo.es> wrote:
only load the module pool1 and no pool2
List *both* pools in the "post-auth" section.
Alan DeKOk. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
______________________________________________ Renovamos el Correo Yahoo! Nuevos servicios, más seguridad http://correo.yahoo.es
Tariq Rashid <tariq.rashid@uk.easynet.net> wrote:
hi - i after much searching the archives i couldn't find a good way to proxy to subdomains of a domain:
user@xxx.yyy.zz.domain.com
for any number of subdomains under a given domain.com (inlcuding nil).
is this possible? (i don't want the username stripped)
yes. DEFAULT User-Name =~ "domain\.com$", Proxy-To-Realm := "domain.com" Alan DeKok.
Hello!
hi - i after much searching the archives i couldn't find a good way to proxy to subdomains of a domain:
user@xxx.yyy.zz.domain.com
for any number of subdomains under a given domain.com (inlcuding nil).
is this possible? (i don't want the username stripped)
There are two possible solutions to this. The first is to use the "users" file to match the User-Name against a regular expression that matches your wishes (using the =~ operator) and setting a Proxy-To-Realm attribute hint when the expression matches. The other possibility - which is much more intuitive - is to apply a patch to the FreeRADIUS sources that allows you to define wildcard realm matching in the realm sections of proxy.conf (where I strongly think it belongs - why would you want to define realms in the *users* file when there are dedicated realm definitions?). The patch was posted by Rok Papez to the users and devel mailing lists some time ago. If you don't find it, just drop me a private mail and I'll send you a copy. BTW, I have recently learned during the TERENA Networking Conference that this patch is in a much more widespread use than I thought it was, being deployed in a worldwide educational RADIUS infrastructure by many countries (some participants of www.eduroam.org). So, you can probably consider it being quite stable. It's a pity that it is not being considered for inclusion into the official source code. Greetings, Stefan Winter -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingénieur de recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu tél.: +352 424409-1 http://www.restena.lu fax: +352 422473
Stefan Winter <freeradius-users-ml@stefan-winter.de> wrote:
BTW, I have recently learned during the TERENA Networking Conference that this patch is in a much more widespread use than I thought it was, being deployed in a worldwide educational RADIUS infrastructure by many countries (some participants of www.eduroam.org).
Wow...
So, you can probably consider it being quite stable. It's a pity that it is not being considered for inclusion into the official source code.
Hmm... I'll take another look at it. Alan DeKok.
participants (4)
-
Alan DeKok -
Maybel Rodriguez -
Stefan Winter -
Tariq Rashid