custom attributes per realm/proxy after auth.
Current running environment: freeradius: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Aug 26 2015 at 14:47:03 postgres 9.3 Hi all I’m running FR for a number of BRAS’es and I’m working on implementing BNG service (cisco XR) Up to now, we have been able to do realm processing on the BRAS’es them self, just used radius for auth, but have to go to a centralised solution. We have number of proxy connections to 3rd party radius servers, based on domain name, and for each of those 3rd parties, I need to be able to reply to the NAS(BNG) number of radius attributes(AV pairs, tunnel info etc.. ) this is the flow: BNG -> my radius -> 3rd party radius 3rd party radius (auth only) -> my radius (adds attributes) -> BNG can someone point me in the right direction where this is configured - Benedikt
Hi,
Current running environment: freeradius: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Aug 26 2015 at 14:47:03
upgrade. seriously.
can someone point me in the right direction where this is configured
run a session in debug mode, look at the output and read the flow - you'll see that pre-proxy gets hit, the packet gets sent off to remote proxy, then return stuff goes through post-proxy and then post-auth. you can use post-proxy or post-auth. the technical guide might be useful: http://networkradius.com/doc/FreeRADIUS-Technical-Guide.pdf alan
Hi Alan I have been playing with the attr_filter after enabling the attr_filter.post-proxy in sites-default This enables me to filter requests – and that is fine, but I need to add attributes to the final response to the NAS – Where would be the best place to do that ? On the other hand, I requested a quote from the freeradius commercial side, but not gotten any response – just trying to speed things up as we are in a bit of a pickle. perhaps people are off for the season - Benedikt On 22/12/2016, 19:43, "Freeradius-Users on behalf of A.L.M.Buxey@lboro.ac.uk" <freeradius-users-bounces+benedikts=vodafone.is@lists.freeradius.org on behalf of A.L.M.Buxey@lboro.ac.uk> wrote: Hi, > Current running environment: > freeradius: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Aug 26 2015 at 14:47:03 upgrade. seriously. > can someone point me in the right direction where this is configured run a session in debug mode, look at the output and read the flow - you'll see that pre-proxy gets hit, the packet gets sent off to remote proxy, then return stuff goes through post-proxy and then post-auth. you can use post-proxy or post-auth. the technical guide might be useful: http://networkradius.com/doc/FreeRADIUS-Technical-Guide.pdf alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have been playing with the attr_filter after enabling the attr_filter.post-proxy in sites-default This enables me to filter requests and that is fine, but I need to add attributes to the final response to the NAS Where would be the best place to do that ?
In the post-auth section, which runs after authenticate and post-proxy (in case of proxying). Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
Hi,
Hi Alan
I have been playing with the attr_filter after enabling the attr_filter.post-proxy in sites-default This enables me to filter requests – and that is fine, but I need to add attributes to the final response to the NAS – Where would be the best place to do that ?
post-auth - the final bit before reply is sent to NAS
On the other hand, I requested a quote from the freeradius commercial side, but not gotten any response – just trying to speed things up as we are in a bit of a pickle. perhaps people are off for the season
??? I dont work for them ;-) alan
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Benedikt Sveinsson -
Stefan Paetow