Local Auth if Proxy Auth fails ---OR--- Proxy Auth if Local Auth fails

[Alan DeKok]

Яцко Эллад Геннадьевич (ngs) wrote:
> 1) NAS -> FreeRADIUS: User/Password
> 2) FreeRADIUS - Does User exist in Local DB?

authorize {
	...
	ldap
	if (!notfound) {
		update control {
			Proxy-To-Realm := "realm"
		}
	}
	...
}


  And set up the realm with home server, etc.

> 3) If "yes" - Access-Acept!
> 4) If "no" - Are any Proxies configured? FreeRADIUS -> Proxy: User/Password
> 5) Proxy answers, FreeRADIUS translates the answer further to NAS.

  All of the rest happens automatically.

  Alan DeKok.