Eric Dean <[EMAIL PROTECTED]> wrote: > However, if I try to modify the reply attributes to add certain attributes > within the users file by specifying > > DEFAULT Suffix=="foo.bar.com" > Session-Timeout = 28800, > Idle-Timeout = 900 > > The it stops authenticating. Debug shows that requests being sent to the > downstream radius server have the realm stripped so the user > [EMAIL PROTECTED] is proxied as test@ with the realm stripped.
Yes. The documentation isn't clear about which attributes do what. The 'Suffix' attribute matches a suffix, AND strips it off. You want to use the 'Realm' attribute. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
