> This part looks fine, though I'd recommend not using the 
> actual realm names for the module instances.
> 

Ok.  I changed the names.  We now have:
sunset.net -> suffix
IPASS ->        prefix

> >authorize {
> >         preprocess
> >         sunset.net
> >         IPASS
> 
> And this tells it to look for 'sunset.net' first, which it 
> does, and strips it and proxies it.  Reverse the order here 
> and you'll get the behaviour you are looking for.

I have tried that.  So this would be the order:

authorize {
        preprocess
        prefix
        suffix
}

So, I decided to comment out the "suffix", and it starts proxying
correctly.  But as soon as I uncomment the suffix, no matter which order
they are in, the proxying stops working.  And it works the other way by
commenting out the prefix, and leaving the suffix in place.

So, I guess my question is, In order for me to proxy one realm that has
a prefix and needs to NOT be stripped, and another realm, that has a
suffix and needs to be stripped, how should I setup my authorize group?

 
Thanks.

                                                      .~.
                                                      /v\
--                                                   // \\
JA                                                  /(   )\
                                                     ^`~`^
                                                   L I N U X
[-----------------------------------------------------------]
 Justin Ainsworth                    Systems Administrator &
 PHONE: (530) 879-5660x108      Technical Support Supervisor
 FAX:   (530) 879-5676                        Sunset Net LLC
 WEB:   http://www.sunset.net              1915 Mangrove Ave   
 EMAIL: [EMAIL PROTECTED]                       Chico, CA 95926  
[-----------------------------------------------------------] 


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to