pre-proxy automatically added "NAS-IP-Address"
    ichiro tanaka 
    i_tanaka at hotmail.co.jp
       
    Thu Oct 21 11:34:11 CEST 2010
    
    
  
thanks a lot Phil.
>It was probably added by the "preprocess" module, if memory serves.
>
>Why would you want to stop it?
>
>If you do, just remove the "preprocess" module from the "authorize" 
>section - but it does a lot of other processing and cleanups too.
>
>The better option is to use attr_filter in the "pre-proxy" section, like so:
>
>pre-proxy {
>   attr_filter.preproxy
>}
>
>...then in /etc/raddb/attrs.pre-proxy, edit the sample entries to 
>permit/deny attributes you want/don't want to send.
>
>You probably want the postproxy filter too, in case your upstream proxy 
>sends you junk you can't / don't want to handle.
Oh, I see.
Surely I didn't think that "preprocess" added "NAS-IP-Address".
I used "attr_filter", and could stop it.
my settings...
---
/etc/raddb/attrs.pre-proxy
example.jp
    User-Name =* ANY,
    User-Password =* ANY,
    NAS-IP-Address !* ANY
    
DEFAULT
    User-Name =* ANY,
    User-Password =* ANY,
    ...
---
thanks for your help
ichiro tanaka
    
    
More information about the Freeradius-Users
mailing list