proxy DEFAULT realm bug-o-feature?

Alan DeKok aland at
Wed Oct 18 18:35:46 CEST 2006

Mike <needacoder at> wrote:
> Instead, I tried
> to be "smarter" by using the default realm, that way I need to only
> have a single realm statement in config and it will work "forever".
> When I did this, I find that the suffix module is actually returning
> the string DEFAULT instead of actual Realm name

  But DEFAULT *is* the realm name.  The names are what's in the conf
files, not what's in the User-Name field.

  What you *really* want is this, in preproxy_users:

DEFAULT	   User-Name =~ "@([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)$"
	   NAS-IP-Address = `%{1}`

  That works *without* using any concept of "realms".

  Alan DeKok.
--       - The web site of the book - The blog

More information about the Freeradius-Devel mailing list