Locking realm access to a specific huntgroup

Jonathan De Graeve Jonathan.De.Graeve at imelda.be
Wed Jun 14 15:34:27 CEST 2006


> You could try to manually set the "Proxy-To-Realm" variable in the
> "users" file instead of using the "realm" module.  For example,
> test with something like that:
> 
> DEFAULT User-Name =~ "@foo\.net$", Huntgroup-Name == "bar",
Proxy-To-Realm
> := "foo.net"

Ok, this is working :) (I tried the same with a wrong regexp)

> > Using attr_filter isn't an option since this only filters replys.
> 
> The attr_filter module can be used in both pre-proxy and post-proxy
> sections.

Indeed but if I understand it right, you can't distinct between the 2
types?
Furthermore, this only changes/filters attributes while I needed to
check the huntgroup to the local radius.

Since the DEFAULT trick works, I'm happy :)

Thx a lot ;)

J. 





More information about the Freeradius-Users mailing list