Proxy-To-Realm and Users File
Mike O'Connor
freeradius at pineview.net
Thu Aug 27 11:25:21 CEST 2009
Alexander Clouter wrote:
> Mike O'Connor <freeradius at pineview.net> wrote:
>
>> Using freeradius 2.1.4 the following works if I user the hints file.
>>
>> DEFAULT Called-Station-Id == "splns357"
>> User-Name := "%{User-Name}@mb.webshield.net.au"
>>
>> The user is proxied to the correct server and the user is correctly set.
>>
>> I now need to proxy based on the User-Name which in this case will
>> always be a telephone number (Mobile Broadband SIM's)
>>
>> I had added the following to the users file (which I hope to change to
>> the fast users later)
>>
>> 61466004163 Proxy-To-Realm := "mb.webshield.net.au"
>> User-Name := "%{User-Name}@mb.webshield.net.au"
>>
>> This proxies the user to the next server but does not rewrite the
>> username, I've also tried a couple of other in this file but none seem
>> to work.
>>
>>
> I ran into this too, I think I got the impression that after you call
> 'suffix' things are set in stone and User-Name/Realm is read-only (in
> the 'request' set of valuepairs); which is fair enough[1]. If you do
> rewrite 'proxy-request:User-Name' you probably will find things work as
> you expect.
>
> Cheers
>
> [1] later on when mangling other things, you apprieate that mangling the
> original User-Name/Realm was a Bad Idea(tm) and besides whats
> the point in calling 'suffix' also :)
>
>
I have to be able to do this rewrite in a dynamic way because I'm
forwarding wholesale services which do not have a realm.
I've been reading the source code and can not find any thing which would
indicate a locking in the rlm_preprocess.
Any other ideas out there for this problem ?
Mike
Does anyone know how I could affect thing
More information about the Freeradius-Users
mailing list