Is it possible to have a per-realm post-proxy section? We need to add a couple of attributes to our Access-Accepts which vary in content depending on which realm we've proxied. Otherwise, is there an easy way to distinguish realm in the global post-proxy section? Shaun.
On 13/08/12 17:16, Shaun Lowry wrote:
Is it possible to have a per-realm post-proxy section? We need to add a couple of attributes to our Access-Accepts which vary in content depending on which realm we've proxied. Otherwise, is there an easy way to distinguish realm in the global post-proxy section?
Just refer to it. post-proxy { if (Realm == abc) { update reply { ... } } elsif (Realm ...) { } } ...or: post-proxy { switch (Realm) { case "abc" { } case "def" { } case { } } }
Hi,
Is it possible to have a per-realm post-proxy section? We need to add a couple of attributes to our Access-Accepts which vary in content depending on which realm we've proxied. Otherwise, is there an easy way to distinguish realm in the global post-proxy section?
well, there are a couple of ways. 1) use virtual servers and have completely seperate post-proxy sections (by way of them being in different VS files) for each realm 2) use unlang in the post-proxy section of your current config e.g. (uick nasty code from head so dont copy without checking!!) if (%{Realm} == "blah-blah.com"){ update reply { Session-Timeout := "3600" } } ..there is a third option...and thats to call a PERL/Python/PHP etc script alan
Shaun Lowry wrote:
Is it possible to have a per-realm post-proxy section?
No. But you can have pre/post proxy sections for home server pools. See proxy.conf.
We need to add a couple of attributes to our Access-Accepts which vary in content depending on which realm we've proxied. Otherwise, is there an easy way to distinguish realm in the global post-proxy section?
It's in the "Realm" attribute? Alan DeKok.
participants (4)
-
alan buxey -
Alan DeKok -
Phil Mayers -
Shaun Lowry