Deleting reply items before post-proxy

[Joe Maimon]

Alan DeKok wrote:

> Eddie Stassen wrote:
> 
>>I was trying to get rid of my 'post-proxy-authorize' dependency and
>>found that any attributes added during the authorize stage are removed
>>when the proxy reply  is received.  Surely this is not intended
>>behaviour
> 
> 
>   Yes.  The problem is that the "authorize" stage is usually done wrong,
> for reasons that go back to the original implementation.
> 
>   The authorize section often updates the *reply*, which is just plain
> backwards.  Instead, the authorize section should set the stage for the
> authentication stage, i.e. known passwords, group checking, etc.  Once
> the user is authenticated, the post-authenticate section should set the
> reply.


So how do I properly ensure that entries I have attached to DEFAULTS for 
proxied realms in my users file actually get sent? Currently I have the 
offending code patched out.