On 02/06/11 16:17, DaveA wrote:
Alan DeKok wrote: > Proxying. Set up a minimal virtual server that proxies to others. Okay, this makes sense, but I am still unclear as to where to make the differentiation between NAS-Port-Types. What I envision is something like: If (NAS-Port-Type == Virtual ) { Home_server = admincli } Elsif (NAS-Port-Type == Ethernet ) { Home_server = 8021x }
authorize { ... if (NAS-Port-Type == Virtual) { update control { Proxy-To-Realm := ADMIN_SERVER } } # N.B. maybe do this instead elsif (EAP-Message) { update control { Proxy-To-Realm := EAP_SERVER } } ... } ..and in proxy.conf: home_server EAP { type = auth+acct virtual_server = eap } home_server_pool EAP_POOL { home_server = EAP } realm EAP_SERVER { pool = EAP_POOL } - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html