FreeRADIUS 3.0.1 [Proxy To Another Radius if Reject Received]
Ibrahim Almahfooz
ibrahim.nezar at gorannet.net
Mon Jul 11 19:10:04 CEST 2016
Let's say our idea is wrong, impossible and bad.
If the server can not do it by unlang, is there any module or any
workaround for such a thing (Proxy rejected packets)?
On 11 July 2016 at 18:35, Alan DeKok <aland at deployingradius.com> wrote:
> On Jul 11, 2016, at 10:56 AM, Ibrahim Almahfooz <
> ibrahim.nezar at gorannet.net> wrote:
> > Thank you Alan for your answer however I will be waiting for Stefan help
> regarding the other method. We need such a setup to be implemented
> temporary for two-three months then we will remove it.
>
> The server cannot turn a Reject into a proxied packet via unlang.
>
> It doesn't matter if the setup is temporary. Your requirements are
> based on bad ideas about security. Your design is wrong. It adds
> complexity, and doesn't add security.
>
> What you want to do is impossible. Fix your design to follow the
> recommendations given on this list.
>
> Alan DeKok.
>
>
--
More information about the Freeradius-Users
mailing list