Do not query LDAP if authenticated via proxy

[Alan DeKok]

Steven Carr wrote:
> We are joining Eduroam and we have our FreeRADIUS set to proxy on the
> DEFAULT realm and have a separate realm for our local domain.
> 
> If we pass a request to the proxy to be authenticated both before and
> after the request has been proxied it queries our LDAP server to check
> if the user exists.

  So... use "unlang" to check for your local domain, and run the "ldap"
module only if it matches the local domain

	if (User-Name =~ /@my_domain.com/) {
		ldap
	}

> How can I stop it from doing this? it is a waste of time and an
> unnecessary connection/query to our LDAP server as it is never going to
> be authenticated by our LDAP server.

  You don't "stop" it.

  You tell it to query the LDAP server *ONLY* when it sees
Access-Requests where User-Name contains your domain.

  Once you formulate the problem that way, the solution becomes obvious.

  Alan DeKok.