Pls help: realm based proxy setting
ST Wong (ITSC)
ST at itsc.cuhk.edu.hk
Mon Jul 6 03:06:16 CEST 2009
>> Hi all,
>>
>> I'm using freeradius 2.1.3 and setting up a realm-based proxy server.
>> In users file, I add line like following:
>>
>>
>> DEFAULT Aruba-Essid-Name == "NewSSID", Realm ==
>> "realm1.my.domain", Proxy-to-realm := "test1.my.domain",
>> aruba-user-vlan := 191
>> Fall-Through = 1
>>
>> Request can be proxied to test1.my.domain if the realm
>> "realm1.my.domain" is defined in proxy.conf. Otherwise suffix will
>> resolve to DEFAULT realm and thus won't match the line in users file.
>> Is it possible to do the same thing without defining the 'virutal'
>> realm (realm1.my.domain in my example) in proxy.conf?
>
>Perhaps. Is everybody for NewSSID suposed to go to that radius server
for authentication? If not, in order to tell users apart you need a
realm.
Yes, we want to proxy users using different realms to different radius
servers for authentication.
>> Besides, I'd like to add "aruba-user-vlan := 191" AV pair in the
reply
>> but can't see it in radclient output. Did I miss anything?
>
>So add it as a reply item. It's on the check line in your entry.
Get it.
Thank you very much.
/ST Wong
More information about the Freeradius-Users
mailing list