Hi,
I have posted a patch for this on the developers list, but there has been
no response yet so I'm wondering if this patch would be as useful to others
as it is for me. Basically it allows one to specify a check list in the
realm config which would then be checked before a request is proxied. e.g.:
realm company.com {
authhost = 10.0.0.1:1645
accthost = 10.0.0.1:1646
secret = mysecret
check = "Called-Station-Id == 1234,NAS-Port-Type <= 2"
}
If the incoming request for realm mycompany.com does not match the items in
'check', rlm_realm will not set the Proxy-To-Realm attribute and the
request will not be proxied. Omitting 'check' from the config would allow
realms to be proxied as usual.
Any Comments?
Eddie
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html