ldap authorization request in a post_proxy section?

Paul TAVERNIER paul.tavernier at ac-rouen.fr
Tue Nov 4 17:01:40 CET 2008


	Hi,

	How should i call the ldap module in the post_proxy section (in 
Freeradius v1 or v2...)?

	It should perhaps be easier to ask a single question rather than in my 
long request posted yesterday...;o)

	In Freeradius v1, i can merge in an access-accept response radius 
attribute to a proxy reply.

radiusd.conf
------------
...
authorize {
	...
	suffix
	ldap
	...
}

post_proxy {
	eap
}
...

proxy.conf
----------
proxy server {
	...
#
#  Older versions of the server would pass proxy requests through the
#  'authorize' sections twice; once when the packet was received
#  from the NAS, and again after the reply was received from the home
#  server.  Now that we have a 'post_proxy' section, the replies from
#  the home server should be sent through that, instead of through
#  the 'authorize' section again.
#
#  However, for backwards compatibility, this behaviour is configurable.
#  The default configuration is 'yes', for backwards compatibility.
#  To use ONLY the new 'post_proxy' section, set this value to 'no'.
#
         post_proxy_authorize = yes
	...
}

realm otp {
         type = radius
         authhost = myproxyradius:1812
         secret = xxxxxxx
}


And it works because it parses twice the authorization section (as i 
seemed to understand, sorry i'm french ;o))...a thing that doesn't 
happen in v2.x...


Rgds
Paul

-- 
============================
Paul TAVERNIER
Equipe Reseaux-Securite
Division Informatique
Rectorat de ROUEN
	






More information about the Freeradius-Users mailing list