Hi,

I have posted a patch for this on the developers list, but there has been 
no response yet so I'm wondering if this patch would be as useful to others 
as it is for me.  Basically it allows one to specify a check list in the 
realm config which would then be checked before a request is proxied. e.g.:

realm company.com {
        authhost = 10.0.0.1:1645
        accthost = 10.0.0.1:1646
        secret   = mysecret
        check    = "Called-Station-Id == 1234,NAS-Port-Type <= 2"
}

If the incoming request for realm mycompany.com does not match the items in 
'check', rlm_realm will not set the Proxy-To-Realm attribute and the 
request will not be proxied.  Omitting 'check' from the config would allow 
realms to be proxied as usual.

Any Comments?

Eddie


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to