Attributes sent to proxy servers ...

Arran Cudbard-Bell A.Cudbard-Bell at sussex.ac.uk
Tue Feb 5 15:16:22 CET 2008


> Never mind ...
>
> ++[sql] returns ok
>   expand: %{User-Name} -> ac221 at loopback.sussex.ac.uk
> attr_filter: Matched entry DEFAULT at line 12
> ++[attr_filter.accounting_response] returns updated
>
> *sigh*
>
All works now.

Might be any idea to replace
accounting {
    ...
    #  Filter attributes from the accounting response.
    attr_filter.accounting_response
}

With
accounting {
    ...
    #  Filter attributes from the accounting response.
    if(!"%{control:Proxy-To-Realm}"){
        attr_filter.accounting_response
    }
}

In the default config, or create a Post-Acct section for the filter to 
live in. Else all proxied accounting requests will have their attributes 
stripped out.

Still getting internal attributes displayed...

Sending Accounting-Request of id 206 to 194.82.174.185 port 1813
    Acct-Session-Id = "004E0000001B"
    Acct-Status-Type = Start
    Acct-Authentic = RADIUS
    Acct-Delay-Time = 0
    NAS-Port = 1
    Calling-Station-Id = "001B63A3A8DD"
    Event-Type = Framed-User
    NAS-IP-Address = 139.184.8.16
    NAS-Identifier = "hp-e-its-dev8021x-sw1"
    User-Name = "ac221 at loopback.sussex.ac.uk"
    Stripped-User-Name = "ac221 at loopback.sussex.ac.uk"
    Realm = "jrs"
    Acct-Unique-Session-Id = "98c00d277000c63a"
    SQL-User-Name = "ac221 at loopback.sussex.ac.uk"
    Realm = "jrs"
    Proxy-State = 0x323532

-- 
Arran Cudbard-Bell (A.Cudbard-Bell at sussex.ac.uk)
Authentication, Authorisation and Accounting Officer
Infrastructure Services | ENG1 E1-1-08 
University Of Sussex, Brighton
EXT:01273 873900 | INT: 3900




More information about the Freeradius-Users mailing list