Re: Realms and proxying

2008-08-19 Thread Stefan Winter

Hi,


Is this position dependant? Does it have to appear before the liv.ac.uk realm to prevent 
"[EMAIL PROTECTED]" being caught by the first realm?
  


No, unless you use a regex in the realm stanza, the matches are 
*literal* realms. i.e. realm liv.ac.uk does not match foo.bar.liv.ac.uk.


Greetings,

Stefan Winter

--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la 
Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Realms and proxying

2008-08-19 Thread Dean, Barry
I currently have a realm defined:

realm liv.ac.uk {
type= radius
authhost= LOCAL
accthost= LOCAL
}

I now have one of my departments, which for various complex reasons, has been 
allowed to have its own user accounts.
They have the subdomain name "csc.liv.ac.uk". I want to proxy RADIUS to their 
server.

If I add:

realm csc.liv.ac.uk {
type= radius
authhost= server.csc.liv.ac.uk:1812
accthost= server.csc.liv.ac.uk:1813
}

Is this position dependant? Does it have to appear before the liv.ac.uk realm 
to prevent "[EMAIL PROTECTED]" being caught by the first realm?

I have:

realm suffix {
format = suffix
delimiter = "@"
}

in radius.conf.

---
Barry Dean
Networks Team
Computing Services Department
Tel: 0151 794 5641 (x45641)



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html