do I add the unlang code?
>
> as you have
>
I have made the changes in the file proxy-inner-tunnel -- i'm not sure if
this is where i'm supposed to be adding the change.
> >2. how do i update the reply?
>
> by updating the reply
>
> > I cur
pdating the reply
>I currently have the following code in my proxy-inner-tunnel file :-
>post-proxy {
>eap
>if (proxy-reply:Access-Accept) {
> update proxy-reply { Framed-IP-Address := "%{sql:SELECT Value FROM
>`radreply` WHER
sorry alan, perhaps I'm mixing up my examples in an attempt to get this
working...
1. where (or in which file) do I add the unlang code?
2. how do i update the reply?
I currently have the following code in my proxy-inner-tunnel file :-
post-proxy {
eap
if (proxy-reply:A
Hi,
why are you now talkign about users file? use unlang - as you originally
stated
and then update the reply
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Wed, May 1, 2013 at 11:15 AM, wrote:
> Hi,
>
> if you look at freeradius running in debug mode, you can see what bits of
> the
> server are being hit and where you can do the required changes. so
> post-proxy
> would be okay - but you update the reply
>
when runn
Hi,
if you look at freeradius running in debug mode, you can see what bits of the
server are being hit and where you can do the required changes. so
post-proxy
would be okay - but you update the reply
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
hi guys
i am having a hard time getting a post-proxy setup going.
we have a freeradius 2.1.8 server setup for a specific realm.
authentication requests are coming from a upstream provider (3g carrier)
onto our radius server. our radius server sends the authentication request
to another radius
On 15 Oct 2012, at 16:35, Gianni Costanzi wrote:
> As the subject says, is it possible to call the files module in the
> post-proxy section within the default virtual server (sites-enabled/default)?
> I'm using a piece of code in unlang to match the realm in the post-proxy
>
As the subject says, is it possible to call the files module in the
post-proxy section within the default virtual server
(sites-enabled/default)?
I'm using a piece of code in unlang to match the realm in the post-proxy
section and when it matches a given value I'd like to tell unlang to
Shaun Lowry wrote:
> Is it possible to have a per-realm post-proxy section?
No. But you can have pre/post proxy sections for home server pools.
See proxy.conf.
> We need to add a
> couple of attributes to our Access-Accepts which vary in content
> depending on which realm w
Hi,
> Is it possible to have a per-realm post-proxy section? We need to
> add a couple of attributes to our Access-Accepts which vary in
> content depending on which realm we've proxied. Otherwise, is there
> an easy way to distinguish realm in the global post-proxy section?
On 13/08/12 17:16, Shaun Lowry wrote:
Is it possible to have a per-realm post-proxy section? We need to add a
couple of attributes to our Access-Accepts which vary in content
depending on which realm we've proxied. Otherwise, is there an easy way
to distinguish realm in the global post-
Is it possible to have a per-realm post-proxy section? We need to add a
couple of attributes to our Access-Accepts which vary in content
depending on which realm we've proxied. Otherwise, is there an easy way
to distinguish realm in the global post-proxy section?
Shaun.
-
List
Dan Fisher | Fluidata writes:
> Hi,
>
> We are using Cisco and Juniper devices as LAC's to terminate DSL
> sessions before sending on via L2TP to customer LNS's. We allow our
> customers to use radius Attribute 67 via our radius servers to specify
> the tunnel-server-endpoint for their sessions.
Dan Fisher | Fluidata wrote:
> We have been using Cisco LACs predominantly over the last couple of
> The issue I have is that the Juniper device will not process the +=
> operator based results,
That makes no sense. The operators are *not* sent in the RADIUS
packet. So changing the operators w
I cannot force all of my
customers to change the attributes they send me back from proxying based on the
NAS-IP-Address, so I have to make the necessary changes myself on my radius
servers. I know I can add a bit of code in post proxy using ulang to carry out
something when the Juniper devices
Dear Brian Candler,
thank you for focus.
I think freeradius may lack the opportunity to change & filter
acctcounting-response(reply) in post-proxy.
I have done this througth filter proxy-reply.
Best regards
WeiJingpeng
Brian Candler wrote:
On Mon, Apr 18, 2011 at 09:13:47PM +0800,
On Mon, Apr 18, 2011 at 09:13:47PM +0800, 魏景鹏 wrote:
> In post-proxy section, I wrote lines as follows:
>
> post-proxy {
> if(cond) {
> attr_filter.accounting_response
> }
> }
>
> But it seems not work as expected.
>
> Any Ideas?
How d
Dear All,
In post-proxy section, I wrote lines as follows:
post-proxy {
if(cond) {
attr_filter.accounting_response
}
}
But it seems not work as expected.
Any Ideas?
Best Regards
WeiJingPeng
-
List info/subscribe/unsubscribe? See http://www.freeradius.org
Hello,
Sorry to post again for the same subject, but I guess I haven't been
very clear in my last question to the list, so I'm trying to ask it
differently.
I've done some drawing that illustrate the settings I've tried and also
provide the whole log, that could be seen here
http://www.bro
9;# /* How many return codes there are
*/
# Fonction appellee en phase post-proxy
sub post_proxy {
# Liste des attributs presents en phase Post-Proxy : debug uniquement
# &log_attributes;
# Recuperation des attributs de QoS Redback, provenant du serveur
Radius
Julien Leloup wrote:
> My question is, do I have to make this script (and SQL schema I suppose)
> available in the FreeRadius CVS ? I'm not sure it's the kind of script
> usefull for a large panel of FreeRadius users, but if I have to make it
> available (maybe to respect GPLv2 or if someone is int
Hello,
I developped a little script in Perl working with FreeRadius v2.x,
called in post-proxy section to implement QoS Radius attributes
translation from "Class" attribute to Alcatel-Lucent QoS attribute "SLA
Profile" and "SUB Profile". It's using a data
Alan DeKok a écrit :
Mustapha Bouikhif wrote:
I am having problemes getting Post-Proxy-Type to work in FreeRadius (FR);
I did tests with FR v2.0.3 and FR v2.0.5 after update without success;
Here is what i want to do:
Use attr_rewrite to write some attributes (those for setting VLAN) in
Mustapha Bouikhif wrote:
> I am having problemes getting Post-Proxy-Type to work in FreeRadius (FR);
> I did tests with FR v2.0.3 and FR v2.0.5 after update without success;
> Here is what i want to do:
> Use attr_rewrite to write some attributes (those for setting VLAN) in
>
Hi All,
I am having problemes getting Post-Proxy-Type to work in FreeRadius (FR);
I did tests with FR v2.0.3 and FR v2.0.5 after update without success;
Here is what i want to do:
Use attr_rewrite to write some attributes (those for setting VLAN) in
proxy replies received from the home server
so), I use the preproxy_user file to add
attributes to the proxied requests and attr_filter to block others.
In a second phase (post-proxy phase I assume), when the reply comes
from the home FreeRadius, I have to go through the same kind of
process (add attributes which values are taken from a
for
translating attributes between two vendor specific equipements
(Alcatel-Lucent and Redback).
In a first phase (pre-proxy so), I use the preproxy_user file to
add attributes to the proxied requests and attr_filter to block
others.
In a second phase (post-proxy phase I assume), when the
others.
In a second phase (post-proxy phase I assume), when the reply comes from
the home FreeRadius, I have to go through the same kind of process (add
attributes which values are taken from a database), but I can't find a
equivalent of preproxy_user file to the post-proxy phase.
I think
Hi Alan
> Do you see it in the response packet? Or in debug mode? Or both?
>
>
Yes with verbose turned on in radclient you see the extra value pair
printed on the screen.
> CVS head has this fixed. You can run separate pre/post proxy sections
> for authentication and
Mike O'Connor wrote:
> It should ? ok then there is a bug because my radclient tests show it in
> the return. Thats the reason why I first when looking for a fix.
Do you see it in the response packet? Or in debug mode? Or both?
CVS head has this fixed. You can run separate pre
Hi Alan
> Run attr_filter only on the post-auth section. Or, are you doing
> proxying?
>
>
Yes this install is a proxy radius.
> That doesn't matter too much. It should be stripped out before the
> reply is sent.
>
It should ? ok then there is a bug because my radclient tests show it in
Mike O'Connor wrote:
> How do I only add a radius attribute via attr_filter on Accept-Accept
> Packets ?
Run attr_filter only on the post-auth section. Or, are you doing
proxying?
> My current config is adding the attribute on accounting reply packets also.
That doesn't matter too much. It
Hi Guys
How do I only add a radius attribute via attr_filter on Accept-Accept
Packets ?
My current config is adding the attribute on accounting reply packets also.
Thanks
Mike
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Markus Krause wrote:
>> Maybe try the postauth section? That's really for handling replies
>> from the current server to the NAS.
> hmm, that sounds interesting, but i could not find any information
> (which i could unterstand) on how to do that. would that mean to write a
> module of my own? ma
the realm exists, and it's authoritative.
the section "post-proxy", which contains
"attr_filter", is _not_ processed.
Because the request isn't proxied.
Is this really the intended behaviour and if yes, can i change it
(without hacking the code on myself?)
It
Markus Krause wrote:
> i found out that if i am doing local proxying (by setting "authhost =
> LOCAL" in proxy.conf)
That's NOT local proxying. It's a hack for telling the server that
the realm exists, and it's authoritative.
> the section "post-pro
is not a complaint! maybe i am asking the wrong or a
too dump question ...)
i found out that if i am doing local proxying (by setting "authhost =
LOCAL" in proxy.conf) the section "post-proxy", which contains
"attr_filter", is _not_ processed. If i am using a "rea
trying different things to solve this (i got no repsonses so far
which, of course, is not a complaint! maybe i am asking the wrong or a
too dump question ...)
i found out that if i am doing local proxying (by setting "authhost =
LOCAL" in proxy.conf) the section "post-proxy&
Dnia czwartek, 19 października 2006 23:55, Pshem Kowalczyk napisał:
> Hi,
>
> I have a simple question - is it possible to check the status of
> request (Accept/Reject) in a post-proxy phase using rlm_perl? And if
> so - how?
>
> kind regards
> pshemko
> -
> List i
Hi,
I have a simple question - is it possible to check the status of
request (Accept/Reject) in a post-proxy phase using rlm_perl? And if
so - how?
kind regards
pshemko
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Peter Nixon <[EMAIL PROTECTED]> wrote:
> We are already using "preproxy_users" to
> modify packets before we send them to downstream servers but I don't see
> any "postproxy_users" file :-(
It's in the CVS head, for 2.0.
> Whats the easiest way to do this? The rewrite module? Is there any reaso
Hi Guys
I have the following in the "users" file which works great:
DEFAULT Framed-Protocol == PPP
Framed-IP-Netmask = 255.255.255.255,
Fall-Through = Yes
I want to do exactly the same thing but for Access Accept packets that I am
proxying from downstream servers. We are already
Hi,
What i would like to do is send an attribute in the radius answer but
only for proxied request. When the reply comes back from a distant
radius server, I would like to add something like :
Filter-ID = "Enterasys:version=1:policy=test".
But i want to add this only for proxied users whic
Hi !
See post_proxy_authorize in proxy.conf.
Yes, "post_proxy_authorize = yes" was the solution and some hacking in the
user file.
See also "postproxy_users", which is I think what you want.
This file/function "postproxy_users" wasn't documented, maybe someone can do
that for the 1.
"VannMann32 ." <[EMAIL PROTECTED]> wrote:
> >Reading the doc/proxy file, i read that the user file is processed as usual
> >after accept is received ms radius server.
See post_proxy_authorize in proxy.conf.
See also "postproxy_users", which is I think what you want.
Alan DeKok.
-
List inf
Hi !
I'm trying to set up Freeradius (1.1.0) to proxy ms-chap-v2 and when
I get the "accept" from ms-win2k3-ias server, then i want to assign
a static ip address.
Reading the doc/proxy file, i read that the user file is processed as usual
after accept is received ms radius server.
users :
DE
Hi !
I'm trying to set up Freeradius (1.1.0) to proxy ms-chap-v2 and when
I get the "accept" from ms-win2k3-ias server, then i want to assign
a static ip address.
Found a odd solution :
radius.conf :
ippool pool-ip {
range-start = 192.168.1.100
range-stop =
Hi !
I'm trying to set up Freeradius (1.1.0) to proxy ms-chap-v2 and when
I get the "accept" from ms-win2k3-ias server, then i want to assign
a static ip address.
Reading the doc/proxy file, i read that the user file is processed as usual
after accept is received ms radius server.
users :
DEF
I have a case where I use Freeradius for proxy auth/acct to home servers.
Before the answer goes back to the Nas I need to add some attributes and now
looking for the best way of doing this.
You can do this with the rlm_attr_filter. Read the attrs file and man
rlm_attr_filter.
-
List info
_attr_rewrite should help.
> I´am already that far that I thought I need to patch the files module to
> have function for post-proxy which then I could use to parse another users
> file adding those Attributes
Sure.
> BTW I found some parameter in the modules which do read the rea
hose Attributes to the Request Reply)
attributes so that there still there when the Home Radius sends an answer ?
Of course in a scalable way 20-40 realms.
I´am already that far that I thought I need to patch the files module to
have function for post-proxy which then I could use to parse another u
"Thor Spruyt" <[EMAIL PROTECTED]> wrote:
> > This is allready in CVS. You can checkout release 1.19 of rlm_perl and
> > use it with freeradius 1.0.4
>
> Sure, but will it be in the next official release?
I'll take a look at it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.f
Boian Jordanov wrote:
> On Fri, Sep 02, 2005 at 01:16:31AM +0200, Thor Spruyt wrote:
>> I'm wondering if rlm_perl will support pre/post-proxy functions in
>> the next release?
>>
>
> This is allready in CVS. You can checkout release 1.19 of rlm_perl and
> use
On Fri, Sep 02, 2005 at 01:16:31AM +0200, Thor Spruyt wrote:
> I'm wondering if rlm_perl will support pre/post-proxy functions in the next
> release?
>
This is allready in CVS. You can checkout release 1.19 of rlm_perl and
use it with freeradius 1.0.4
--
Best Regards,
Boia
Hi,
I'm wondering if rlm_perl will support pre/post-proxy functions in the next
release?
Also, is there any chance to get bug 275 into next release?
http://bugs.freeradius.org/show_bug.cgi?id=275
Or does it have to be discussed further on the list?
--
Groeten, Regards, Salutations,
Thor S
Tariq Rashid <[EMAIL PROTECTED]> wrote:
> those that are at
> $PREFIX/var/log/radius/radacct/1.2.3.4/post-proxy-detail-20050729 and
> $PREFIX/var/log/radius/radacct/1.2.3.4/pre-proxy-detail-20050729 for example
Ah. The reason the username isn't there is because it's no
those that are at
$PREFIX/var/log/radius/radacct/1.2.3.4/post-proxy-detail-20050729 and
$PREFIX/var/log/radius/radacct/1.2.3.4/pre-proxy-detail-20050729 for example
- written by the following directgives in radiusd.conf :
# This module logs packets proxied to a home server.
#
Tariq Rashid <[EMAIL PROTECTED]> wrote:
> since the state must be maintained in the freeradius proxy - is it possible
> to add it to the logs so that troubleshooting is easier? currently i have to
> match the timestamps.
Which log are you talking about?
Alan DeKok.
-
List info/subscribe/uns
hi - i'm logging the pre-proxy and post-proxy logs. this works fine.
the proxy-logs show the user-name (and password attribute) and that is fine.
however the post-proxy logs don't contain the user-name because the reply
from the backend radius server doesn't necessarily send the
in
= reply
replacewith = "180"
new_attribute = yes
attribute = Session-Timeout
}
}
}
post-proxy {
test
}
Thank you,
Wilhelm
is this a supported/valid option?
post-proxy:
* i have the normal attr_filter constraints being applied - which is
great.
* i'd like however to append additional attributes to the radius
proxy reply before it is sent
back to the NAS client. what'
On Thu, Apr 14, 2005 at 05:19:46PM +0300, Pasi Kärkkäinen wrote:
> On Tue, Apr 12, 2005 at 06:07:02PM -0400, Alan DeKok wrote:
> > Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote:
> > > If I'm trying to do something that won't work, please tell me.. :)
> >
> > I have no idea why y
On Tue, Apr 12, 2005 at 06:07:02PM -0400, Alan DeKok wrote:
> Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote:
> > If I'm trying to do something that won't work, please tell me.. :)
>
> I have no idea why you're using attr_rewrite to search for nothing,
> and add Pool-Name.
>
>
Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote:
> If I'm trying to do something that won't work, please tell me.. :)
I have no idea why you're using attr_rewrite to search for nothing,
and add Pool-Name.
Why not just add the Pool-Name attribute in the "authorize" section?
A
, I _need_ to assign IP-addresses in the _Proxy_ based on realm.
>
> I set up rlm_ippool for each realm. Now, I need to assign Pool-Name
> attribute for all requests based on realm. I do this:
>
> users-file:
>
> DEFAULT Realm == "foo.com", Post-Proxy-Type :=
. but that
didn't work either. rlm_ippool still says it cannot find the Pool-Name
attribute.
Thanks for your help!
- Pasi Kärkkäinen
> users-file:
>
> DEFAULT Realm == "foo.com", Post-Proxy-Type := post.proxy.foo
>Fall-Through = 1
Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote:
> This patch is required for freeradius 1.02 to run modules in
>
> post-proxy {
This is fixed in the latest CVS snapshots. The patch won't go into
1.0.2, because it's more of a new feature, and the 1.0.x
home servers based on realm.
Now, I _need_ to assign IP-addresses in the _Proxy_ based on realm.
I set up rlm_ippool for each realm. Now, I need to assign Pool-Name
attribute for all requests based on realm. I do this:
users-file:
DEFAULT Realm == "foo.com", Post-Proxy-Type := post.proxy.fo
On Sun, Jan 02, 2005 at 10:51:11PM +0100, Nicolas Baradakis wrote:
> Pasi Kärkkäinen wrote:
>
> > I need to add Post-Proxy-Type based on realm of the proxied
> > request.
> >
> > I can't figure out how to express this with the sql tables:
> > &qu
On Tue, Feb 15, 2005 at 04:22:48PM +0100, Nicolas Baradakis wrote:
> Alan DeKok wrote:
>
> > Please do not put pre-proxy code into the "authorize" section of a
> > module. We will fix the server.
>
> The following patch will make the server run the module
utes returned
> by the ACE server, without traversing the file twice?
You may add the Class attribute in the post-proxy section.
In recent CVS snapshots of FreeRADIUS, you can use the "Post-Proxy-Type"
stanza. Therefore you can write in the users file:
<<<<<
DEF
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello
We assign VPN profiles based on LDAP group membership and the
devices that users enter from. The users are authenticated via an
ACE server that we proxy to and get replies from.
In an older version of FreeRadius (0.8.1), the following types of
Alle 15:17, domenica 13 febbraio 2005, Nicolas Baradakis ha scritto:
>
> Post-Proxy-Type is a check item, therefore I think you can set it in
> the first pass of authorization, then the server remember it when it
> receives the reply from the realm server.
good I noticed the free
Alan DeKok wrote:
> Please do not put pre-proxy code into the "authorize" section of a
> module. We will fix the server.
The following patch will make the server run the modules in one of
the {Pre,Post}-Proxy-Type stanzas.
Index: src/i
Massimiliano Liccardo wrote:
> Maybe cuold be useful to patch the rlm_files in order to provide a
> prost_proxy file as the pre_proxy one? Could be useful for setting
> the Post-Proxy-Type without re-passing the authorize section and
> using rlm_files directy into Post-Proxy, i.e.
!!
Maybe cuold be useful to patch the rlm_files in order to provide a prost_proxy
file as the pre_proxy one? Could be useful for setting the Post-Proxy-Type
without re-passing the authorize section and using rlm_files directy into
Post-Proxy, i.e.
modules {
..
# Li
Alan DeKok wrote:
> I'm not sure why it was changed. I'll have to look into the reasons
> for it.
It looks like the {Pre,Post}-Proxy-Type stanzas were never supported in
the first place. That's why Paul removed them from the documentation.
The module_{pre,post}_proxy fu
Alle 18:44, giovedì 10 febbraio 2005, Alan DeKok ha scritto:
> Please do not put pre-proxy code into the "authorize" section of a
> module.
It's just a temporary workaround.
> We will fix the server.
fine!
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.htm
Massimiliano Liccardo <[EMAIL PROTECTED]> wrote:
> My problem is that I'm developing rml_modules on my own and if I use
> Autz-Type , I should write the pre/post-proxy code into the authorization
> callback of any module instead of pre-proxy/post-proxy (yes, pre-proxy is
&g
Nicolas Baradakis <[EMAIL PROTECTED]> wrote:
> Looking at src/main/modules.c, the functions module_pre_proxy /
> module_post_proxy (and the function module_preacct, too) don't have a
> supplementary argument for the subcomponent name.
>
> I was thinking it will not work for that reason, but perhap
Alle 12:34, giovedì 10 febbraio 2005, Massimiliano Liccardo ha scritto:
> My problem is that I'm developing rml_modules on my own and if I use
> Autz-Type , I should write the pre/post-proxy code into the authorization
> callback of any module instead of pre-proxy/post-proxy (yes
Nicolas,
thanks a lot for your tip...maybe could became a FAQ :)
My problem is that I'm developing rml_modules on my own and if I use
Autz-Type , I should write the pre/post-proxy code into the authorization
callback of any module instead of pre-proxy/post-proxy (yes, pre-proxy is
just an
Massimiliano Liccardo wrote:
> I'm using a freeRADIUS to proxy different realm to home servers.
> I need to use different rlm_modules for each realm during pre-proxy and
> post-proxy but I cannot realize how to set something like Autz-Type..
I need exactly the same thing as you,
Alle 11:15, giovedì 10 febbraio 2005, Nicolas Baradakis ha scritto:
> Alan DeKok wrote:
> > Massimiliano Liccardo <[EMAIL PROTECTED]> wrote:
> > > At the moment pre-proxy/post-proxy only work for all the realms.no
> > > possibility to differentiate like auto
Alan DeKok wrote:
> Massimiliano Liccardo <[EMAIL PROTECTED]> wrote:
>
> > At the moment pre-proxy/post-proxy only work for all the realms.no
> > possibility to differentiate like autorize/authentication..
> > Maybe I'm wrong?
>
> It works, it&#x
Massimiliano Liccardo <[EMAIL PROTECTED]> wrote:
> I'm using a freeRADIUS to proxy different realm to home servers.
> I need to use different rlm_modules for each realm during pre-proxy and
> post-proxy but I cannot realize how to set something like Autz-Type..i.e It
> coul
Hi,
I'm using a freeRADIUS to proxy different realm to home servers.
I need to use different rlm_modules for each realm during pre-proxy and
post-proxy but I cannot realize how to set something like Autz-Type..i.e It
could be perfect If
users:
DEFAULT Realm== "foo" , Pre-Pr
Joe H wrote:
> Error: rlm_attr_filter: Authorize method will be deprecated.
[...]
> I'm just wondering about that error.
Don't bother about it, this is always printed at module initialization.
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.
this be changing soon? I don't have the attr_filter
module listed in the authorize section. The attr_filter is in the
post-proxy section of the radiusd.conf like suggested. I have
post_proxy_authorize set to no in the proxy.conf.
It does work the way I have it setup, I'm just wonde
Pasi Kärkkäinen wrote:
> I need to add Post-Proxy-Type based on realm of the proxied
> request.
>
> I can't figure out how to express this with the sql tables:
> "DEFAULT Realm == "foo.net", Post-Proxy-Type := post.proxy.foo"
>
> There's no R
vsweb.cgi/~checkout~/radiusd/doc/rlm_sql?rev=1.4
>
Back to this problem after some time.
I have read both of those links.. but still I can't figure out how to do
this in sql-users:
>You need one module instance of rlm_attr_rewrite for each realm.
>In the "users" file you pu
Pasi Kärkkäinen wrote:
> But, I'm using sql-users.. How do you put that kind of entries to
> (my)sql?
http://www.frontios.com/freeradius.html
http://www.freeradius.org/cgi-bin/cvsweb.cgi/~checkout~/radiusd/doc/rlm_sql?rev=1.4
--
Nicolas Baradakis
-
List info/subscribe/unsubscribe? See http:/
On Thu, Nov 11, 2004 at 10:50:35PM +0100, Nicolas Baradakis wrote:
> Pasi Kärkkäinen wrote:
>
> > > > > > How do I add new attribute in post-proxy section?
> > > > >
> > > > > See module rlm_attr_rewrite.
> >
> > But you can
Pasi Kärkkäinen wrote:
> > > > > How do I add new attribute in post-proxy section?
> > > >
> > > > See module rlm_attr_rewrite.
>
> But you can't use this to add value based on realm..
You need one module instance of rlm_attr_rewrite for each
m not stripping realms
> when
> proxying), and the user was accepted by the another radius server, I need to
> add "foo_pool" value for Pool-Name, so the user get's an IP from the
> foo_pool.
>
> Pool-Name is freeradius Internal attribute, so I can't return it fr
IP from the
foo_pool.
Pool-Name is freeradius Internal attribute, so I can't return it from the
another radius server. So it seems I have to do something in the post-proxy
section to add Pool-Name attribute to the reply?
I tried with attr_rewrite, but you can't do it based on realm with
at
On Wed, Nov 10, 2004 at 06:41:25PM +0100, Nicolas Baradakis wrote:
> Pasi Kärkkäinen wrote:
>
> > > > How do I add new attribute in post-proxy section?
> > >
> > > See module rlm_attr_rewrite.
> >
> > Thanks for you reply.
> >
> > Re
Pasi Kärkkäinen wrote:
> > > How do I add new attribute in post-proxy section?
> >
> > See module rlm_attr_rewrite.
>
> Thanks for you reply.
>
> Reading the man-page, I didn't see how to _add_ attribute with
> rlm_attr_rewrite.
You can add an attribute
On Tue, Nov 09, 2004 at 07:34:33PM +0100, Nicolas Baradakis wrote:
> Pasi Kärkkäinen wrote:
>
> > How do I add new attribute in post-proxy section?
>
> See module rlm_attr_rewrite.
>
Thanks for you reply.
Reading the man-page, I didn't see how to _add_ attri
1 - 100 of 106 matches
Mail list logo
