Hello Jason, Hello Eric -
This will work for the reply packet being sent back to the NAS, assuming that the Proxy-State attributes are identical.
However, if you are in the middle of a chain of proxy servers, this may not be the correct solution.
The radius RFC (2865) states that there can be zero or more (ie. possibly more than one) Proxy-State attributes, with each hop in a chain of proxy servers responsible for adding and removing its own Proxy-State attribute.
You will need to analyse exactly what is required, and then implement whichever hook is appropriate.
regards
Hugh
Try this, In your config add something close to the following line:ReplyHook file:"/usr/local/etc/testhook" and the file it pointing to being: ------------------- sub { my $p = ${$_[0]}; # proxy reply packet my $rp = ${$_[1]}; # reply packet to NAS my $op = ${$_[2]}; # original request packet my $sp = ${$_[3]}; # packet sent to proxy my $proxystate = $op->get_attr('Proxy-State'); if ($proxystate) { $rp->delete_attr('Proxy-State'); $rp->add_attr('Proxy-State',$proxystate); } } ------------ -Jason On Thu, 14 Nov 2002, Eric Hunter wrote:Yeah, I tried that... and it strips out both of them :) I'll take a look at the hooks tomorrow, thanks for the tip :) Eric ----- Original Message ----- From: "Hugh Irvine" <[EMAIL PROTECTED]> To: "Eric Hunter" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Thursday, November 14, 2002 5:25 PM Subject: Re: (RADIATOR) Removing a second Proxy State attribute.Hello Eric -
You could try a StripFromRequest, but check a trace 4 debug to make
sure this doesn't break things.
Otherwise, you will have to write a Hook (there are some examples in
"goodies/hooks.txt").
regards
Hugh
On Thursday, Nov 14, 2002, at 17:06 Canada/Eastern, Eric Hunter wrote:
Is there an easy way to remove a second duplicate Proxy State attribute from a packet? (Its going through two proxies, and getting it in there twice is screwing things up on the final destination). Eric === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.-- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence.=== Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.------------------------------------------------------- -- Mike McCauley [EMAIL PROTECTED] Open System Consultants Pty. Ltd Unix, Perl, Motif, C++, WWW 24 Bateman St Hampton, VIC 3188 Australia http://www.open.com.au Phone +61 3 9598-0985 Fax +61 3 9598-0955 Radiator: the most portable, flexible and configurable RADIUS server anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, TTLS etc on Unix, Windows, MacOS etc. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
-- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence. === Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
