Joe Maimon wrote:
And that is what I have done.
git://github.com/jmaimon/freeradius-server.git
OK. After a quick look, there are a number of patches which can be
pulled in. I'll try to do that this week.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
Alan DeKok wrote:
Joe Maimon wrote:
Here is what I am doing with rlm_policy
You had control above. Why request here?
These are all the patches I am currently carrying.
OK... my $0.02 is put them in github. Fork the stable branch, apply
your patches, and send me a link to the
Alan DeKok wrote:
Joe Maimon wrote:
Would that be this freeradius internal attribute?
Home-Server-Pool
It's used to proxy requests to a home server pool, without involving
realms.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
It doesnt
Joe Maimon wrote:
It doesnt work with Home-Server-Pool, but it does work with Proxy-To-Realm.
Hmm... what does that mean? If you put the update section inside of
an if statement that never matches... it won't work.
The Home-Server-Pool code *should* work in 2.1.7. I can double-check
it
Alan DeKok wrote:
Joe Maimon wrote:
It doesnt work with Home-Server-Pool, but it does work with Proxy-To-Realm.
Hmm... what does that mean? If you put the update section inside of
an if statement that never matches... it won't work.
The if matches just fine and updates with rlm_policy,
Joe Maimon wrote:
The if matches just fine and updates with rlm_policy, but I couldnt get
something reasonable in unlang to parse successfully. I would appreciate
some tips.
To do...?
So I should try regex =~ .* ?
To do... ?
That didnt work either.
And... what does the debug output
Alan DeKok wrote:
Joe Maimon wrote:
It doesnt work with Home-Server-Pool, but it does work with Proxy-To-Realm.
Hmm... what does that mean? If you put the update section inside of
an if statement that never matches... it won't work.
The Home-Server-Pool code *should* work in 2.1.7. I
Alan DeKok wrote:
Joe Maimon wrote:
The if matches just fine and updates with rlm_policy, but I couldnt get
something reasonable in unlang to parse successfully. I would appreciate
some tips.
Here is what I am doing with rlm_policy
if (request:Class =* ) {
if
Joe Maimon wrote:
Here is what I am doing with rlm_policy
if (request:Class =* ) {
And what does that mean? I haven't looked at the policy code in years...
if (request:Client-Short-Name == noc03rt07) {
control .= {
Alan DeKok wrote:
Joe Maimon wrote:
Here is what I am doing with rlm_policy
if (request:Class =* ) {
And what does that mean? I haven't looked at the policy code in years...
And it still works nicely.
If Class exists in the request.
See man unlang the CONDITIONS
Alan DeKok wrote:
Right now, yes. In 2.1.7, you probably won't have to.
You can give the realms any name you want.
Alan DeKok.
Would that be this freeradius internal attribute?
Home-Server-Pool
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Joe Maimon wrote:
Would that be this freeradius internal attribute?
Home-Server-Pool
It's used to proxy requests to a home server pool, without involving
realms.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Joe Maimon wrote:
So I write all accounting coming into the server duplicated into
multiple detail files, one per potential destination.
Yes.
Then I have a reader which while reading filters only what I want to
send to the destination.
Yes.
I have multiple readers.
I think I get
Joe Maimon wrote:
Certain systems need copies of accounting data, but I only want to send
a subset of accounting to the appropriate system. I dont want to change
the way the server updates the sql accounting and local detail files.
If you need *multiple* copies, then the detail write/reader
Alan DeKok wrote:
Joe Maimon wrote:
Certain systems need copies of accounting data, but I only want to send
a subset of accounting to the appropriate system. I dont want to change
the way the server updates the sql accounting and local detail files.
If you need *multiple* copies, then
Alan DeKok wrote:
Joe Maimon wrote:
Certain systems need copies of accounting data, but I only want to send
a subset of accounting to the appropriate system. I dont want to change
the way the server updates the sql accounting and local detail files.
If you need *multiple* copies, then
Joe Maimon wrote:
So I define multiple home servers as the potential destinations for the
copied accounting in proxy.conf
Yes. AND you write to multiple detail files.
How do I specify where to send the accounting in the detail-reader?
Either of these?
ATTRIBUTE Proxy-To-Realm
Certain systems need copies of accounting data, but I only want to send
a subset of accounting to the appropriate system. I dont want to change
the way the server updates the sql accounting and local detail files.
I want something like this
acct.hints
DEFAULT Client-IP-Address == 1.2.3.4,
18 matches
Mail list logo
