proxy + rlm_perl question

Boian Jordanov bjordanov at orbitel.bg
Mon Oct 30 14:00:08 CET 2006


On Monday 30 October 2006 12:52, Francois-Xavier GAILLARD wrote:
> Hi list,
>
> I have 2 questions:
>
> 1/ I'll have to proxy auth requests to a client's home radius. He is just
> allowed to check the user's username/password.
>  I know how to filter attributes using attrs and the post-proxy section of
> radiusd.conf. But I don't know how to ADD attributes, like
> Framed-IP-Address for example.

To add attribute you have to put it in hash %RAD_REQUEST_PROXY_REPLY 
for example to return   IP address say 
$RAD_REQUEST_PROXY_REPLY{'Framed-IP-Address' = "10.10.10.1"; 

>  User-Name isn't sent back from the home radius to the proxy radius in
> the Access-Accept, thus I can't make any sql query (I use mysql backend)
> based on the username to get the Framed-IP-Address I want to assign to
> the users.
>  I could do a sql query in the pre-proxy section (don't know if it's ok,
> because you can't use the sql module in post-proxy) but I don't want to
> send anything else than UserName and Password to the client's home
> radius.
>
> Any idea how I could do that ?
>
> 2/ when I try to use example.pl in the post-proxy section I get the
> following error:
>
> Can't load '/usr/lib/perl/5.8/auto/Data/Dumper/Dumper.so' for module
> Data::Dumper: /usr/lib/perl/5.8/auto/Data/Dumper/Dumper.so: undefined
> symbol: Perl_sv_cmp at /usr/lib/perl/5.8/XSLoader.pm line 68. at
> /usr/lib/perl/5.8/Data/Dumper.pm line 27
> Compilation failed in require at /usr/local/libexec/post-proxy.pl line 31.
> BEGIN failed--compilation aborted at /usr/local/libexec/post-proxy.pl line
> 31.
>

Look at here http://bugs.freeradius.org/show_bug.cgi?id=236 

> Doesn't look that there's any problem with the perl script (the script
> doesn't do anything actually, it's just for testing purpose):
>
> root at debvm1 :/etc/freeradius#/usr/local/libexec/post-proxy.pl
> root at debvm1 :/etc/freeradius#
>
> I'm a real *dick* a perl programming, I guess the problem might be a
> pebcak, but maybe it's not.
>
> I'm using FR 1.1.2 with Debian Sarge.
>
> Thanks for any hint.
>
> regards,
> Fox.

-- 
Best Regards,
Boian Jordanov
SNE
Orbitel - Next Generation Telecom
tel. +359 2 4004 723
tel. +359 2 4004 002



More information about the Freeradius-Users mailing list