Adding reply attributes when proxy
12 Aug
2009
12 Aug
'09
10:05 a.m.
Hello. I have a FR 2.1.6+MySQL running on one box and a another box running Radius/Token server. Using realms in proxy.conf. Authentication works fine when proxying but the reply attributes from the SQL-table radreply are not added in the Access-Accept packet when proxy is used. If i use ClearText-Password it works fine. Googled and i found that earlier versions of FR had the post_proxy_authorize = yes that did this. How can i configure it so that attributes from radreply are sent? Regards Mika -- View this message in context: http://www.nabble.com/Adding-reply-attributes-when-proxy-tp24937303p24937303... Sent from the FreeRadius - User mailing list archive at Nabble.com.
13 Aug
13 Aug
8:08 a.m.
Hello.
I don´t think it is because of the attribute filters since the backend token
server is not replying with attributes. I want them added in post-proxy
section in FreeRadius.
So i tried the following in the post-proxy {
if (proxy-reply:Access-Accept) {
update proxy-reply {
Class := "%{sql:SELECT Value FROM radreply WHERE username ='%{User-Name}'
AND attribute = 'Class'}"
State := "%{sql:SELECT Value FROM radreply WHERE username ='%{User-Name}'
AND attribute = 'State'}"
}
}
The above seems to work but if one of the attributes are missing from the
user it still will send State 0x.
And if it is Access-Reject in stead of Access-Accept it will still send out
State attribute and Reply-Message= failed authentication..
I´m not very good in scripting so if someone would be kind to add a bit of
unlang or if/then to complete it i would appreciate it.
And there might be new attributes added later on so this really would need
to be more flexible. Thanks in advance.
/M
>check what you are allowing via the proxy - check your attribute filters
>alan
-
--
View this message in context: http://www.nabble.com/Adding-reply-attributes-when-proxy-tp24937303p24953688.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
6173
Age (days ago)
6174
Last active (days ago)
2 comments
2 participants
participants (2)
-
Alan Buxey -
mikoi