appending to a proxy reply attribute

Joe Maimon jmaimon at ttec.com
Tue Nov 1 13:52:44 CET 2005



Tariq Rashid wrote:

> hi - i would like to achieve the following:
> 
> 	* inspect the reply packet from a proxy target radius
> 
> 	* if the reply contains "Framed-Route", for example
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1
> 	  then append a string to the value:
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001
> 
> 	* NOTE that the appended string depends on the realm/domain so possibilities are:
> 		for username a at ABC.com
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001
> 
> 		for username b at XYZ.com
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-XYZ-001
> 
> how is this possible with freeradius 1.0.2?
> 
> tariq
>

Well one possible way that occurs to me would be to use an external 
program with the exec module.

attr_rewrite would do it except it seems that you need to check other 
attributes.

rlm_policy would do it, except I dont know about its ability to APPEND 
to an existing attribute....

Were I you I would also check rlm_perl, something I have never actually 
done.





More information about the Freeradius-Users mailing list