attrs.filter differences between FR 2.2.0 and FR 3

Arran Cudbard-Bell a.cudbardb at
Mon Nov 11 18:34:48 CET 2013

On 11 Nov 2013, at 17:12, Palmer J.D.F. <J.D.F.Palmer at SWANSEA.AC.UK> wrote:

> Hello,
> I’m just putting together a dev install of FR3 but am struggling with porting the attribute filter for post-proxy.
> In FR 2.2.0 I have the section below is in my file, which matches Access-Accept packets from the jrs realm, i.e. when a visiting eduroam user authenticates successfully.
> Access-Accept.jrs
>         User-Name =* ANY,
>         Reply-Message =* ANY,
>         State =* ANY,
>         Class =* ANY,
> However, in FR 3 the Access-Accept not matched, the section it is only matched if I remove the Access-Accept to just leave the realm.
> The file is located at  /usr/local/raddb/mods-config/attr_filter/post-proxy
> And I’ve added the following section to /usr/local/raddb/mods-enabled/attr_filter
> attr_filter {
>         filename = ${modconfdir}/${.:name}/post-proxy
> }

Filters use an arbitrary key just the same as the Users-File.

attr_filter {
	key = "%{Response-Packet-Type}.%{Realm}"
	filename = ${modconfdir}/${.:name}/post-proxy

May work, if it doesn't we might need to add some xlat magic to expose the proxy response.

Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

More information about the Freeradius-Users mailing list