Best config practices?

sphaero arnaud at sphaero.org
Mon Aug 11 12:44:03 CEST 2008




Stefan Winter-4 wrote:
> 
> 
> Well, if you have LOCAL for *every* realm, my suggestion would be not 
> not call any realm module at all. Then the proxy.conf file is ignored 
> and you can leave it untouched.
> 
> Then, obviously using Realm == test.com in the users file should be 
> replaced. You can do it by
> 
> DEFAULT User-Name =~ ".*@test.com$", Autz-Type := test.com
> 
> HTH,
> 
> Stefan Winter
> 

That's handy suggestion. But what if want to proxy certain realms to other
radius servers. I would still need to use the proxy.conf file. I might set
realm DEFAULT in proxy.conf and
DEFAULT Realm == DEFAULT, User-Name =~ ".*@test.com$", Autz-Type := test.com
and I'm back in business :)

Thanks,

Arnaud

-- 
View this message in context: http://www.nabble.com/Best-config-practices--tp18922693p18923309.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.




More information about the Freeradius-Users mailing list