Hi guys-
I can't seem to find documentation on attr_rewrite in the gz of 0.8.1. I'm
not sure I completely understand all of the fields; mostly append and
new_attribute. I also am not sure I understand the difference between
packet and config in searchin types.
OK, here's what I'm trying to do. I have external usernames, such as
{username}_{digits} (ie; bob_2) that I'd like to drop the '_{digits}'
portion for proxyied authentication/authorization purposes, but use the
original name when returning attributes from the users file. We thought
this would be a tricky way to allow for multiple static Ips for our VPN
service, but still keep a single user around for authentication purposes.
The authentication part works great. However, what I've noticed is that
when the Access-Request packet is sent back, attributes from the rewritten
username are passed back. What I'd like to do instead is have the
attributes from the non-rewritten username passed back. Is this possible,
or is all hope lost because the username is rewritten in the proxy and lost
forever?
-Michael
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
Michael Hare
UW-Madison/WiscNet Network Engineering
My phone: 608-262-5236
24-Hour NOC: 608-263-4188
WiscNet: 608-265-6761
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html