Proxy help

Ivan Kalik tnt at kalik.net
Thu Jun 26 22:56:25 CEST 2008


Update reply with unlang:

http://freeradius.org/radiusd/man/unlang.html

Ivan Kalik
Kalik Informatika ISP


Dana 26/6/2008, "David Mitchell" <mitchell at ucar.edu> piše:

>I should probably add that I can get the Service-Type added using the
>'attrs' file in the post-proxy section. But I want to set the
>Service-Type based on the user and huntgroup so that users have either
>Administrative-User or Login-User access depending on the user and
>device. This doesn't seem to be possible in the attrs file.
>
>-David
>
>David Mitchell wrote:
>> I've having a problem getting the proper attributes set on my response
>> packets when using a proxy.
>>
>> If I authenticate locally with something like this in users:
>> username Cleartext-Password password
>>         Service-Type = Administrative-User,
>>         Reply-Message = "Authorized Users Only",
>>
>> it works fine. The Service-Type and Reply-Message get sent off to the
>> NAS and life is good. However, if I activate a NULL realm and proxy the
>> authentications out, it no longer works. My users file looks more like this:
>> DEFAULT
>>         Service-Type = Administrative-User,
>>         Reply-Message = "Authorized Users Only",
>>
>> Judging from the post-proxy-detail and reply-detail logs it looks like
>> the proxy server is dropping all the attributes and my server doesn't
>> put them back? Is that correct? And is that the way it's supposed to
>> work? Thanks in advance,
>>
>> -David Mitchell
>>
>>
>
>
>--
>-----------------------------------------------------------------
>| David Mitchell (mitchell at ucar.edu)       Network Engineer IV  |
>| Tel: (303) 497-1845                      National Center for  |
>| FAX: (303) 497-1818                      Atmospheric Research |
>-----------------------------------------------------------------
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>




More information about the Freeradius-Users mailing list