Artur Hecker <[EMAIL PROTECTED]> wrote: > but there is a practical issue. i think that freeradius proxying is > currently largely based on the User-Name (all the configuration for > proxying and next server is based on realms which are suffixes or > prefixes of the User-Name). so, it is very logical for me to drop the > packet if you don't know where to proxy it to because otherwise FR does > not know what to do about it.
rlm_realm sets the proxy based on the User-Name, so that code is correct for rlm_realm. The rest of the server doesn't look at the User-Name (or any other packet attributes) when doing proxying. You can set the Proxy-To-Realm attribute independently of rlm_real, So it's possible to do: DEFAULT Framed-Protocol == PPP, Proxy-To-Realm := "foo.com" which will proxy everyone requesting PPP to foo.com. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
