Deleting reply items before post-proxy
Arran Cudbard-Bell
A.Cudbard-Bell at sussex.ac.uk
Sat Sep 1 14:20:24 CEST 2007
Alan DeKok wrote:
> Arran Cudbard-Bell wrote:
>
>> I have to confess I had assumed the proxy behaviour was to allow reply
>> attributes set in the authorise section to be sent on successful
>> authentication by the home server, and structured my configuration to
>> take advantage of this (as it seemed the logical way for things to work).
>>
>
> That can be done... but it's still a little wrong.
>
>
Marginally wrong, but then as discussed previously, the order of things
in general is currently a little wrong.
>> So repeat plea for configuration option to allow the original reply to
>> be combined with the *heavily filtered* reply from server.
>>
>
> That can be done. But the post-proxy-authorize configuration will NOT
> be re-added. It's indescribably wrong, and breaks things.
>
Are you referring to the option that sends the request back through the
main authorize section after proxying?
If yes, then I agree. It's also very inefficient .
> Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
>
Thanks,
Arran
More information about the Freeradius-Devel
mailing list