Modifying authorization replies by a proxy

Martin Horcicka martin at horcicka.eu
Thu Jun 14 18:06:17 CEST 2007


On 6/14/07, Martin Horcicka <martin at horcicka.eu> wrote:
> On 6/14/07, Alan Dekok <aland at deployingradius.com> wrote:
> > Martin Horcicka wrote:
> > > when the FreeRADIUS is configured as a proxy is there any way to
> > > modify the authorization replies (Access-Accept packets) before
> > > sending them to the NAS? I need to add there a few attributes
> > > (purchased connection speed etc.).
> >
> >   Yes.  The post-auth section is executed before the server responds to
> > the NAS.
>
> Well, but is there an existing module which I could use in that
> section to modify the packets on a per user basis? (E.g. something
> with a 'users'-style configuration.)

I have found a solution - using the exec module in the post-proxy
section and adding the attributes by an external script. It is not
very nice but seems to work.

Martin



More information about the Freeradius-Users mailing list