]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
add v4 proxying example to sites-available/default
authorMatthew Newton <matthew-git@newtoncomputing.co.uk>
Wed, 8 Nov 2017 13:57:20 +0000 (13:57 +0000)
committerMatthew Newton <matthew-git@newtoncomputing.co.uk>
Wed, 8 Nov 2017 13:58:08 +0000 (13:58 +0000)
raddb/sites-available/default

index acad8470eb9c1b21d92f345a44cc42a78523e88a..a4bf06b19b4df2ca9cda644fc60f5fc5cd9fab78 100644 (file)
@@ -147,6 +147,18 @@ recv Access-Request {
        #
 #      operator-name
 
+       #
+       #  Proxying example
+       #
+       #  The following example will proxy the request if the
+       #  username ends in example.com.
+       #
+#      if (&User-Name =~ /@example\.com$/) {
+#              update control {
+#                      Auth-Type := "proxy-example.com"
+#              }
+#      }
+
        #
        #  If you want to generate CUI for some clients that do
        #  not send proper CUI requests, then uncomment cui below
@@ -393,6 +405,41 @@ authenticate eap {
 }
 
 
+#
+#  Proxying
+#
+
+#
+#  The following example shows how proxying to three remote servers
+#  can be configured.
+#
+#  The Auth-Type attribute would need to be set to
+#  "proxy-example.com" above. Define the remote servers in
+#  raddb/mods-availble/radius.
+#
+
+#authenticate proxy-example.com {
+#      #
+#      #  Log the request before proxying.
+#      #
+#      pre_proxy_log
+#
+#      #
+#      #  Send the request to remote RADIUS servers, with
+#      #  fail-over if no response.
+#      #
+#      redundant {
+#              radius1.example.com
+#              radius2.example.com
+#      }
+#
+#      #
+#      #  Log the reply after proxying.
+#      #
+#      post_proxy_log.post-proxy
+#}
+
+
 
 ######################################################################
 #