get name of authentication realm

[Alan DeKok]

On Nov 29, 2018, at 6:02 AM, Zdeněk Sobotka <zdenek.sobotka at nic.cz> wrote:
> 
> Hello, I'm trying to retreive name of "authentication realm" like a
> variable in the Freeradius v3 ("LOCAL" in variable in my case). In debug
> log, near suffix module i see:
> 
> (1) suffix: Checking for suffix after "@"
> (1) suffix: Looking up realm "yyyy.cz" for User-Name = "name at yyyy.cc"
> (1) suffix: Found realm "yyyy.cc"
> (1) suffix: Adding Stripped-User-Name = "name"
> (1) suffix: Adding Realm = "yyyy.cc"
> (1) suffix: Authentication realm is LOCAL

  That means you added a configuration in proxy.conf:

realm yyyy.cc {
}

  Which means it's not going to be proxied anywhere.

> I'm found in documentation, that the "Authentication realm" can be found
> in "control:Proxy-To-Realm"
> (https://networkradius.com/doc/3.0.10/raddb/mods-available/realm.html).
> 
> At logs i have, but that variable is empty:
> (2)     if ("%{control:Proxy-To-Realm}" != "LOCAL") {
> (2)     ERROR: Failed retrieving values required to evaluate condition

  Just check if there's no Proxy-To-Realm.  And you don't need to do a string expansion:

	if (!control:Proxy-To-Realm) {
		... it is being handled locally ...
	}

  Alan DeKok.