Radius Proxy for Authorization

[Alan DeKok]

Lutrika Mufti Rachmat wrote:
> I have an existing radius server running on Cisco ACS 4.2. In the
> current configuration, all users are configured using priv ID 15. I
> wanted to setup a proxy radius, where the proxy will relay an
> authentication and authorization request to the Cisco ACS, but when
> relaying back the authentication and authorization message back to the
> clients, I want to overwrite the priv ID with something other than 15
> (for eg, user XXX -> priv 14, user YYY -> priv10, etc).

  This can be done.  See "man unlang" for re-writing attributes.

> Is there a way for me to do that? Or is this behavior is actually
> prohibited by the standards?

  It's not prohibited.

  Alan DeKok.