On Fri, Jul 18, 2003 at 12:39:55PM -0400, Alan DeKok wrote:
> Tero Turtiainen <[EMAIL PROTECTED]> wrote:
> > After this discussion it seems that setting attribute values cannot
> > be done,
>
> SOME attributes can be set: configuration items. Some cannot be:
> attributes in the request.
Alan, could you please describe the difference between them and put it
in the FAQ?
Something like (correct me please if it's wrong or incomplete or too
hard to understand):
Q. What are request attributes?
A. Those which were send by a NAS to the server. Based on these
attributes and collected config items for this user, the server
decides what to do with this user.
Q. What are config/check items for?
A. They tell the server:
a) to compare attributes in the request with given values (so-called
check items), e.g. NAS-IP-Address == 127.0.0.1, NAS-Port < 64;
b) or to do something special with this user later (so-called config
items), e.g. Auth-Type += System, Proxy-To-Realm := "foo.com".
"Config" and "check" are often used as synonyms here.
> You tried to set request attributes, which CANNOT be done in the
> 'users' file.
Q. Can I use them to re-write Some-Attribute in the request?
A. No, you can't. Attributes in the request are commonly not changed.
Try using attr_rewrite module, if you *really* need it.
--
Fduch M. Pravking
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
