At 03:36 PM 1/28/2003 -0600, you wrote:

Don't include a NULL entry in your proxy.conf and it will then failover
to the next 'rlm_realm' module.

-Chris
Chris, Thanks for the prompt reply.. take a peek at the very end of my last message.. copied here. I tried removing the NULL, and then it defaults to the DEFAULT entry. =( Do I have to get rid of the DEFAULT entry as well? Please don't say no!

Maybe as a temp "workaround" this would be fine <cry>.. but should we consider changing how freeradius does these in future releases?

---- copy of previous msg ----

Maybe I'm missing something.. but I've gone over it too many times. =o To me it looks like when it doesn't match "prefix" realm, it automatically looks for NULL instead of moving to the next step in authorize{} which should be to look for the "suffix" realm.

Idea popped into my head right here to try and remove NULL as an option because my config can live without NULL entry. Doing so produced this result:
Tue Jan 28 12:48:56 2003 : Debug: modcall: entering group authorize
Tue Jan 28 12:48:56 2003 : Debug: modcall[authorize]: module "preprocess" returns ok
Tue Jan 28 12:48:56 2003 : Debug: rlm_realm: No '#' in User-Name = "[EMAIL PROTECTED]", looking up realm NULL
Tue Jan 28 12:48:56 2003 : Debug: rlm_realm: Found realm DEFAULT
Tue Jan 28 12:48:56 2003 : Debug: rlm_realm: Proxying request from user [EMAIL PROTECTED] to realm DEFAULT
Tue Jan 28 12:48:56 2003 : Debug: rlm_realm: Adding Realm = "DEFAULT"
Tue Jan 28 12:48:56 2003 : Debug: rlm_realm: Authentication realm is LOCAL.

Now I can live w/o NULL, but I can't live w/o DEFAULT entry..






------
Nathan Miller - [EMAIL PROTECTED]
VISP Technologies
Building The Nation's Largest Network of Successful ISPs.


- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to