Proxy Forwarding on User-Name attribute
Hello, i have the demand to forward some auth-requests to some further radius servers, but only in the case when a specific User-Name is for authorization requested. The User-Name attributes look like this "+493265352354@realm.com" and the userpart is always changing but the realm is always the same. How can i accomplish this without defining every user which is to forward in "proxy.conf"? Is there no way to do this in the authorization backend(sql) for a more dynamic procedure? I have thousands of users which are to forward and others which are not, i think this wont scale inside of proxy.conf and further more i think that there is no part of the User-Name which could be match in proxy.conf to proxy some user requests to different radius servers. I would be happy if anybody could point me to an option to realize this. regards, -christian
Christian Meutes <christian.meutes@de.clara.net> wrote:
i have the demand to forward some auth-requests to some further radius servers, but only in the case when a specific User-Name is for authorization requested. The User-Name attributes look like this "+493265352354@realm.com" and the userpart is always changing but the realm is always the same. How can i accomplish this without defining every user which is to forward in "proxy.conf"?
Set up a realm as normal, and then do: DEFAULT User-Name == "....", Proxy-To-Realm: = "realm" Alan DeKok.
jeah nice, it works! thanks & regards, -christian --On Sunday, October 30, 2005 11:21:49 AM -0500 Alan DeKok <aland@ox.org> wrote:
Christian Meutes <christian.meutes@de.clara.net> wrote:
i have the demand to forward some auth-requests to some further radius servers, but only in the case when a specific User-Name is for authorization requested. The User-Name attributes look like this "+493265352354@realm.com" and the userpart is always changing but the realm is always the same. How can i accomplish this without defining every user which is to forward in "proxy.conf"?
Set up a realm as normal, and then do:
DEFAULT User-Name == "....", Proxy-To-Realm: = "realm"
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Christian Meutes wrote:
Hello,
i have the demand to forward some auth-requests to some further radius servers, but only in the case when a specific User-Name is for authorization requested. The User-Name attributes look like this "+493265352354@realm.com" and the userpart is always changing but the realm is always the same. How can i accomplish this without defining every user which is to forward in "proxy.conf"?
Why arent you defining the realm in proxy.conf? Are you sharing it between unproxied users?
iam not forwarding on realm because the realm is always the same! --On Sunday, October 30, 2005 11:52:04 -0500 Joe Maimon <jmaimon@ttec.com> wrote:
Christian Meutes wrote:
Hello,
i have the demand to forward some auth-requests to some further radius servers, but only in the case when a specific User-Name is for authorization requested. The User-Name attributes look like this "+493265352354@realm.com" and the userpart is always changing but the realm is always the same. How can i accomplish this without defining every user which is to forward in "proxy.conf"?
Why arent you defining the realm in proxy.conf? Are you sharing it between unproxied users? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Christian Meutes -
christian meutes
-
Joe Maimon