FR 2.0.5 MPPE problem - worked in 2.0.4

Alan DeKok aland at deployingradius.com
Sat Jul 5 16:26:54 CEST 2008


John Horne wrote:
> As said, none of the configuration files have changed at all. It seems
> that FR 2.0.5 is dropping the reply items from the 'users' file after
> proxying, rather than passing them on.

  Yes.  Version 1.x re-ran the packet through the "authorize" section
before replying to the NAS.  This feature was removed in 2.x, and
somehow seemed to get back in.  It was removed in 2.0.5... because it's
wrong.  Any post-proxy rules should be applied in the post-proxy section.

  You can work around this by adding the line "files.authorize" to the
post-proxy section.  That tells the server to run the "authorize"
section of the "files" module.

  Alan DeKok.



More information about the Freeradius-Users mailing list