appending to a proxy reply attribute

[Tariq Rashid]

if anyone is interested - we did it like this:

	attr_filter file adds an attribuet because it can distinguish realms

	attr_rewrite macthes and rewrites in post_proxy

seems to work fine.

	

-----Original Message-----
From: freeradius-users-bounces at lists.freeradius.org
[mailto:freeradius-users-bounces at lists.freeradius.org]On Behalf Of Joe
Maimon
Sent: 01 November 2005 12:53
To: FreeRadius users mailing list
Subject: Re: appending to a proxy reply attribute




Tariq Rashid wrote:

> hi - i would like to achieve the following:
> 
> 	* inspect the reply packet from a proxy target radius
> 
> 	* if the reply contains "Framed-Route", for example
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1
> 	  then append a string to the value:
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001
> 
> 	* NOTE that the appended string depends on the realm/domain so possibilities are:
> 		for username a at ABC.com
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-ABC-001
> 
> 		for username b at XYZ.com
> 		Framed-Route = 195.40.42.96/30 83.67.214.162 1 n n 60 uk-XYZ-001
> 
> how is this possible with freeradius 1.0.2?
> 
> tariq
>

Well one possible way that occurs to me would be to use an external 
program with the exec module.

attr_rewrite would do it except it seems that you need to check other 
attributes.

rlm_policy would do it, except I dont know about its ability to APPEND 
to an existing attribute....

Were I you I would also check rlm_perl, something I have never actually 
done.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html