On Mon, Oct 22, 2012 at 11:13 PM,  <[email protected]> wrote:
> Hi Guys,
>
> thank you for your answers. I killed the attribute user-name on my global 
> radius server in post-proxy and post-auth sections by unlang.
>
> Now I have got the full username on my server, because it is not overwritten 
> by other radius communicatons.
>
> The realm is not in the radacct table of server A. But I kow the reason, 
> because FR doesn't know this realms. But thats ok.

Good to know.

>
>>What I don't understand is how come the reply that FR sends STILL contains 
>>User-Name.
>>Reading raddb/attrs and raddb/modules/attr_filter, it looks like FR should 
>>never allow User-Name on Access-Accept.
>>Did you REMOVE attr_filter.post-proxy from raddb/sites-available/default or 
>>whatever virtual server you're using?
>
> Sry, I don't understand the problem. I see more attributes than just 
> user-name. All filters are disabled by default.
> A filter is only for rejecting requests, which are not matching. Right?

No.

And that, is the root of your problem: blindly changing config files
without knowing what it's for. Had you left it the way it was in the
first place, you wouldn't have had this problem.

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to