Post-Proxy attr_filter on Access-Accept Packets only
Hi Guys How do I only add a radius attribute via attr_filter on Accept-Accept Packets ? My current config is adding the attribute on accounting reply packets also. Thanks Mike
Mike O'Connor wrote:
How do I only add a radius attribute via attr_filter on Accept-Accept Packets ?
Run attr_filter only on the post-auth section. Or, are you doing proxying?
My current config is adding the attribute on accounting reply packets also.
That doesn't matter too much. It should be stripped out before the reply is sent. Alan DeKok.
Hi Alan
Run attr_filter only on the post-auth section. Or, are you doing proxying?
Yes this install is a proxy radius.
That doesn't matter too much. It should be stripped out before the reply is sent.
It should ? ok then there is a bug because my radclient tests show it in the return. Thats the reason why I first when looking for a fix. By the way it freeradius 1.1.7 Thanks Mike
Mike O'Connor wrote:
It should ? ok then there is a bug because my radclient tests show it in the return. Thats the reason why I first when looking for a fix.
Do you see it in the response packet? Or in debug mode? Or both? CVS head has this fixed. You can run separate pre/post proxy sections for authentication and for accounting. Alan DeKok.
Hi Alan
Do you see it in the response packet? Or in debug mode? Or both?
Yes with verbose turned on in radclient you see the extra value pair printed on the screen.
CVS head has this fixed. You can run separate pre/post proxy sections for authentication and for accounting.
Ok so when version 2 is release this issue will go away. Mike
participants (2)
-
Alan DeKok -
Mike O'Connor