how to force "Accept" and override default and null proxy realms?
Phil Mayers
p.mayers at imperial.ac.uk
Sat Oct 21 14:10:20 CEST 2006
Mike wrote:
> I would like to always send an Accept unconditionally if the User-Name
> is test[0-9], but proxy request to default or null realm for all other
> user names.
>
> I tried a configuration with
> authorize {
> files
> suffix
> }
> the "suffix" will match on default and null realms. I currently have
> a line in users file that looks like this:
> DEFAULT User-Name =~ "test[0-9]", Auth-Type: Accept
> however regardless of which user makes the request, even the "test"
> user (which does match), the request is still proxied. If I change
> "Auth-Type: Reject", then the test user is always rejected, but I am
> looking for the opposite behavior.
see doc/configurable_failover which describes a way to control how
modules fall through.
Note that simply returning Accept does not work for most Auth-Types e.g.
CHAP, MS-CHAP, EAP. It only really works for PAP
More information about the Freeradius-Users
mailing list