Locking realm access to a specific huntgroup
Jonathan De Graeve
Jonathan.De.Graeve at imelda.be
Wed Jun 14 15:34:27 CEST 2006
> You could try to manually set the "Proxy-To-Realm" variable in the
> "users" file instead of using the "realm" module. For example,
> test with something like that:
>
> DEFAULT User-Name =~ "@foo\.net$", Huntgroup-Name == "bar",
Proxy-To-Realm
> := "foo.net"
Ok, this is working :) (I tried the same with a wrong regexp)
> > Using attr_filter isn't an option since this only filters replys.
>
> The attr_filter module can be used in both pre-proxy and post-proxy
> sections.
Indeed but if I understand it right, you can't distinct between the 2
types?
Furthermore, this only changes/filters attributes while I needed to
check the huntgroup to the local radius.
Since the DEFAULT trick works, I'm happy :)
Thx a lot ;)
J.
More information about the Freeradius-Users
mailing list