Proxy-To-Realm and Users File

Mike O'Connor freeradius at pineview.net
Thu Aug 27 11:25:21 CEST 2009


Alexander Clouter wrote:
> Mike O'Connor <freeradius at pineview.net> wrote:
>   
>> Using freeradius 2.1.4 the following works if I user the hints file.
>>
>> DEFAULT      Called-Station-Id == "splns357"
>>                        User-Name := "%{User-Name}@mb.webshield.net.au"
>>
>> The user is proxied to the correct server and the user is correctly set.
>>
>> I now need to proxy based on the User-Name which in this case will
>> always be a telephone number (Mobile Broadband SIM's)
>>
>> I had added the following to the users file (which I hope to change to
>> the fast users later)
>>
>> 61466004163    Proxy-To-Realm := "mb.webshield.net.au"
>>                          User-Name := "%{User-Name}@mb.webshield.net.au"
>>
>> This proxies the user to the next server but does not rewrite the
>> username, I've also tried a couple of other in this file but none seem
>> to work.
>>
>>     
> I ran into this too, I think I got the impression that after you call 
> 'suffix' things are set in stone and User-Name/Realm is read-only (in 
> the 'request' set of valuepairs); which is fair enough[1].  If you do 
> rewrite 'proxy-request:User-Name' you probably will find things work as 
> you expect.
>
> Cheers
>
> [1] later on when mangling other things, you apprieate that mangling the 
> 	original User-Name/Realm was a Bad Idea(tm) and besides whats 
> 	the point in calling 'suffix' also :)
>
>   
I have to be able to do this rewrite in a dynamic way because I'm
forwarding wholesale services which do not have a realm.

I've been reading the source code and can not find any thing which would
indicate a locking in the rlm_preprocess.

Any other ideas out there for this problem ?

Mike

Does anyone know how I could affect thing



More information about the Freeradius-Users mailing list