proxy same realm but different authentication protocol to different server
Hi, Am I possible to do these? 1. proxy realm xyz.com (PAP/CHAP) to server#1 2. proxy realm xyz.com (PEAP) to server#2 I'm using freeradius 2.1.7 Thank you KH
Hi,
Am I possible to do these?
1. proxy realm xyz.com (PAP/CHAP) to server#1
2. proxy realm xyz.com (PEAP) to server#2
yes, in many varied ways.... you could doa check of Auth-Type at the end of the authorise section..and then if realm = xyz.com update the control to proxy to server1 it its PAP or CHAP or if its EAP then proxy it to server2 alan
Hi Alan Do you mean something like these? if (Auth-Type == "PEAP") { update control { { Proxy-To-Realm := "xyz.com" } realm xyz.com { type = radius authhost = 123.123.123.1:1812 accthost = 123.123.123.1:1813 secret = password nostrip } } } if (Auth-Type == "PAP") { update control { { Proxy-To-Realm := "xyz.com" } realm xyz.com { type = radius authhost = 123.123.123.2:1812 accthost = 123.123.123.2:1813 secret = password nostrip } } } Thanks KH ----- Original Message ---- From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Fri, December 18, 2009 4:22:39 AM Subject: Re: proxy same realm but different authentication protocol to different server Hi,
Am I possible to do these?
1. proxy realm xyz.com (PAP/CHAP) to server#1
2. proxy realm xyz.com (PEAP) to server#2
yes, in many varied ways.... you could doa check of Auth-Type at the end of the authorise section..and then if realm = xyz.com update the control to proxy to server1 it its PAP or CHAP or if its EAP then proxy it to server2 alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan Buxey -
piston