Ivan, Thank You for the link to the proxy page. Unfortunately I am new to radius and have not been able to get it figured out. I have freeradius running on a Debian server. There is an entry in the proxy.conf file that states it was added to strip out domain; Realm DEFAULT { Type =radius Authhost = LOCAL Accthost = LOCAL } I am not sure where, relative to this entry, I need to add the entry for the other domain to forward authentication. I have not found any documentation that explains more detail about the proxy.conf file. If anyone can give me an explanation of how to do this or provide a link to a site that explains more about the proxy.conf file I would appreciate it. Thanks again. Warren -----Original Message----- From: freeradius-users-bounces+wmaurer=redred.com@lists.freeradius.org [mailto:freeradius-users-bounces+wmaurer=redred.com@lists.freeradius.org] On Behalf Of tnt@kalik.co.yu Sent: Wednesday, August 08, 2007 4:31 PM To: FreeRadius users mailing list Subject: Re: redirect authentication to a different radius box based on userdomain http://wiki.freeradius.org/Proxy Ivan Kalik Kalik Informatika ISP Dana 8/8/2007, "Warren Maurer" <wmaurer@redred.com> piše:

Does anyone know of a way to authenticate most users locally, but redirect some users to another radius server for authentication based on the login domain name specified by the user? I am using FreeRadius on a Debian box. Local authentication works properly, but I need to have some users authenticate from a different system based on the domain they are trying to log into. Any help is greatly appreciated.

I tried DEFAULT Suffix =~ "@abc.com$", Auth-Type := Accept and it still tries to authenticate locally

/etc/radius/users;

# for abc.com domain

DEFAULT Suffix =~ "@abc.com$", Auth-Type := Accept

Service-Type = Outbound-User,

Cisco-AVPair = "vpdn:ip-addresses=1.2.3.4",

Cisco-AVPair += "vpdn:tunnel-type=l2tp"

Warren

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Specific realms go towards the start and catch-all (DEFAULT, NULL etc.) go towards the end of the file. Ivan Kalik Kalik Informatika ISP Dana 9/8/2007, "Nicholas Hall" <ngharo@gmail.com> piše:

On 8/9/07, Warren Maurer <wmaurer@redred.com> wrote:

...

Ivan, Thank You for the link to the proxy page. Unfortunately I am new to radius and have not been able to get it figured out. I have freeradius running on a Debian server. There is an entry in the proxy.conf file that states it was added to strip out domain; Realm DEFAULT { Type =radius Authhost = LOCAL Accthost = LOCAL } I am not sure where, relative to this entry, I need to add the entry for the other domain to forward authentication. I have not found any documentation that explains more detail about the proxy.conf file. If anyone can give me an explanation of how to do this or provide a link to a site that explains more about the proxy.conf file I would appreciate it.

Thanks again. Warren

Linked from the Proxy page is http://wiki.freeradius.org/Proxy.conf

I believe there is plenty of information there to get you started

-- Nicholas Hall ngharo@gmail.com 262.208.6271