On Jul 14, 2019, at 9:27 AM, Olivier CALVANO <o.calvano@gmail.com> wrote:

Actually i use proxy.conf for forward auth-request to the good radius server:

realm "~(myrealm.realm)" {

That's treated as a regular expression.

auth_pool = pool-auth.myrealm.realm acct_pool = pool-acct.myrealm.realm nostrip }

login@myrealm.realm work's very good.

That's good but you don't need to match a regular expression like this. You can just match the string.

but for one supplier, i want forward based on login, sample:

realm "MSP-*@OTHER" { auth_pool = pool-auth.myrealm.realm acct_pool = pool-acct.myrealm.realm nostrip }

it's possible ? i think's that i don't have the good synthaxe of realm because that's don't work

The "realm" is the *domain name* portion of the User-Name. You can't match *all* of the User-Name in a "realm" block. What you can do is this: realm OTHER { auth_pool = pool-auth.myrealm.realm acct_pool = pool-acct.myrealm.realm nostrip } And then in the "authorize" section, do: if (User-Name =~ /^MSP-.*@OTHER/) { update control { Proxy-To-Realm := "OTHER" } } else { suffix # do normal realm matching } Alan DeKok.