Dave Mason <[EMAIL PROTECTED]> wrote:
> 1. Is it possible to append another realm to the NAI when proxying a 
> message?  That is, if a message with [EMAIL PROTECTED] arrives and I proxy it 
> to another host based on realm1 in proxy.conf, can the outgoing NAI be 
> [EMAIL PROTECTED]@realm2?  If this can't be done with configuration, I believe 
> it could be done with code, probably in some authorization module somewhere?

  That's what the "preproxy" section is for.  See the "preproxy_users" file.

> 2. A related question: If a message arrives at a proxy server with NAI 
> in the form [EMAIL PROTECTED]@realm2, can Freeradius do a proxy determination 
> based on realm2?  If so, I assume you would have a normal entry for 
> realm2 in proxy.conf, and optionally strip off realm2, leaving the NAI 
> as [EMAIL PROTECTED]

  Yes.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to