On Thu, Apr 14, 2005 at 05:19:46PM +0300, Pasi Kärkkäinen wrote:
> On Tue, Apr 12, 2005 at 06:07:02PM -0400, Alan DeKok wrote:
> > Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= <[EMAIL PROTECTED]> wrote:
> > > If I'm trying to do something that won't work, please tell me.. :)
> >
> > I have no idea why you're using attr_rewrite to search for nothing,
> > and add Pool-Name.
> >
> > Why not just add the Pool-Name attribute in the "authorize" section?
> >
>
> I tried using attr_rewrite because other solutions didn't seem to work, and
> that was suggested by other people..
>
> but, trying again with users file:
>
> I have in the beginning of the users file:
>
> DEFAULT Realm == "foo.com", Pool-Name := foo_ippool
> Fall-Through = 1
>
> Looking at the radiusd debug log, the realm is found for the user, and users
> file matches at the line where I set the Pool-Name ..
>
> but I still get: "rlm_ippool: Could not find Pool-Name attribute." later when
> the Access-Accept packet is got from the home server and IP should be
> assigned
> from the pool..
>
> so, how to make Pool-Name work with proxying (in the radius proxy server,
> not in the home server) ? Thanks!
>
Finally got it working!
I had to set
post_proxy_authorize = yes
in proxy.conf, so that proxy replies pass the authorize section again.. then I
can
set the Pool-Name in the users file (based on realm) for the proxied
requests.
Thanks for all the help!
-- Pasi Kärkkäinen
^
. .
Linux
/ - \
Choice.of.the
.Next.Generation.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
