Questions about FreeRadius proxy

[Alan DeKok]

Dovelet <doveletchan at yahoo.com.hk> wrote:
> Q1) I just setup a FreeRadius server and I want to set it as a Radius Proxy
> server. I know Realm can do it but I found that to use Realm, the user needs
> to append the domain @xxx.com (i.e. user01 at xxx.com) at the end. Is it true?

  No.  You can have default realms.  Read the docs & config files.

> Q2) Can I setup a table in the FreeRadius server with username only so that
> when the Application server request for authentication, the FreeRadius will
> proxy to another RADIUS server only if the username is listed in the table?

  Yes.  See rlm_passwd.

> Q3) If Q2 is feasible, can I have several Application Servers and I limit
> the users from the Application servers? i.e. If user01 login Appliation
> server1, Application Server1 request the FreeRadius server. The FreeRaidus
> server check the user01 is belongs to Application Server1 group and it proxy
> the request to another RADIUS server.

  Yes.  rlm_passwd can do this.

  Alan DeKok.