ldap authorization request in a post_proxy section?
Paul TAVERNIER
paul.tavernier at ac-rouen.fr
Tue Nov 4 17:01:40 CET 2008
Hi,
How should i call the ldap module in the post_proxy section (in
Freeradius v1 or v2...)?
It should perhaps be easier to ask a single question rather than in my
long request posted yesterday...;o)
In Freeradius v1, i can merge in an access-accept response radius
attribute to a proxy reply.
radiusd.conf
------------
...
authorize {
...
suffix
ldap
...
}
post_proxy {
eap
}
...
proxy.conf
----------
proxy server {
...
#
# Older versions of the server would pass proxy requests through the
# 'authorize' sections twice; once when the packet was received
# from the NAS, and again after the reply was received from the home
# server. Now that we have a 'post_proxy' section, the replies from
# the home server should be sent through that, instead of through
# the 'authorize' section again.
#
# However, for backwards compatibility, this behaviour is configurable.
# The default configuration is 'yes', for backwards compatibility.
# To use ONLY the new 'post_proxy' section, set this value to 'no'.
#
post_proxy_authorize = yes
...
}
realm otp {
type = radius
authhost = myproxyradius:1812
secret = xxxxxxx
}
And it works because it parses twice the authorization section (as i
seemed to understand, sorry i'm french ;o))...a thing that doesn't
happen in v2.x...
Rgds
Paul
--
============================
Paul TAVERNIER
Equipe Reseaux-Securite
Division Informatique
Rectorat de ROUEN
More information about the Freeradius-Users
mailing list