"Justin Ainsworth" <[EMAIL PROTECTED]> wrote: > modcall: entering group authorize > modcall[authorize]: module "preprocess" returns ok > rlm_realm: Proxying request from user [EMAIL PROTECTED] to realm IPASS > modcall[authorize]: module "prefix" returns updated > rlm_realm: Proxying request from user IPASS/test to realm sunset.net > modcall[authorize]: module "suffix" returns updated
Isn't that exactly what I said was happening? Have you tried what I said to do, in my previous message? You should note that the debug says it's proxying to BOTH realms, yet the packet is actually sent to only ONE realm. That's a strong indication that your configuration is inconsistent. > Either way, it doesn't appear to be proxying correctly, when both > prefix, and suffix are enabled. No, it's doing exactly what you told it to do: Proxying to BOTH realms. As I said before, read 'doc/configurable_failover'. If you get interested in poking at the source, edit rlm_realms so that BEFORE looking up the realm, it checks to see if the request already has a Proxy-To-Realm attribute. If so, it should return withou doing anything. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
