Proxy help
David Mitchell
mitchell at ucar.edu
Thu Jun 26 22:45:08 CEST 2008
I should probably add that I can get the Service-Type added using the
'attrs' file in the post-proxy section. But I want to set the
Service-Type based on the user and huntgroup so that users have either
Administrative-User or Login-User access depending on the user and
device. This doesn't seem to be possible in the attrs file.
-David
David Mitchell wrote:
> I've having a problem getting the proper attributes set on my response
> packets when using a proxy.
>
> If I authenticate locally with something like this in users:
> username Cleartext-Password password
> Service-Type = Administrative-User,
> Reply-Message = "Authorized Users Only",
>
> it works fine. The Service-Type and Reply-Message get sent off to the
> NAS and life is good. However, if I activate a NULL realm and proxy the
> authentications out, it no longer works. My users file looks more like this:
> DEFAULT
> Service-Type = Administrative-User,
> Reply-Message = "Authorized Users Only",
>
> Judging from the post-proxy-detail and reply-detail logs it looks like
> the proxy server is dropping all the attributes and my server doesn't
> put them back? Is that correct? And is that the way it's supposed to
> work? Thanks in advance,
>
> -David Mitchell
>
>
--
-----------------------------------------------------------------
| David Mitchell (mitchell at ucar.edu) Network Engineer IV |
| Tel: (303) 497-1845 National Center for |
| FAX: (303) 497-1818 Atmospheric Research |
-----------------------------------------------------------------
More information about the Freeradius-Users
mailing list