pre-proxy automatically added "NAS-IP-Address"
ichiro tanaka
i_tanaka at hotmail.co.jp
Thu Oct 21 11:34:11 CEST 2010
thanks a lot Phil.
>It was probably added by the "preprocess" module, if memory serves.
>
>Why would you want to stop it?
>
>If you do, just remove the "preprocess" module from the "authorize"
>section - but it does a lot of other processing and cleanups too.
>
>The better option is to use attr_filter in the "pre-proxy" section, like so:
>
>pre-proxy {
> attr_filter.preproxy
>}
>
>...then in /etc/raddb/attrs.pre-proxy, edit the sample entries to
>permit/deny attributes you want/don't want to send.
>
>You probably want the postproxy filter too, in case your upstream proxy
>sends you junk you can't / don't want to handle.
Oh, I see.
Surely I didn't think that "preprocess" added "NAS-IP-Address".
I used "attr_filter", and could stop it.
my settings...
---
/etc/raddb/attrs.pre-proxy
example.jp
User-Name =* ANY,
User-Password =* ANY,
NAS-IP-Address !* ANY
DEFAULT
User-Name =* ANY,
User-Password =* ANY,
...
---
thanks for your help
ichiro tanaka
More information about the Freeradius-Users
mailing list