From: Scott Armitage <s.p.armitage@lboro.ac.uk>
Date: Sun, 21 Oct 2012 15:39:54 +0000 (+0100)
Subject: Changed cui policy. Added a cui.pre-proxy section to request a cui when proxying... 
X-Git-Tag: release_3_0_0_beta1~1656^2^2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a8bca3528c18c4e92cecbb60f4625d353ce8e356;p=thirdparty%2Ffreeradius-server.git

Changed cui policy. Added a cui.pre-proxy section to request a cui when proxying authentication requests
---

diff --git a/raddb/policy.d/cui b/raddb/policy.d/cui
index 45222676e1a..6dc53acd8d1 100644
--- a/raddb/policy.d/cui
+++ b/raddb/policy.d/cui
@@ -39,6 +39,18 @@ cui.authorize {
 	}
 }
 
+#
+#  Before proxing an Access-Request to a remote server, a NUL CUI
+#  attribute should be added, unless it is already present in the request.
+#
+cui.pre-proxy {
+        if (Packet-Type == Access-Request && "%{client:add-cui}" == "yes") {
+		update proxy-request {
+			Chargeable-User-Identity = '\\000'
+		}
+	}
+}
+                                                                        
 
 #  Add a CUI attribute based on the User-Name, and a secret key
 #  known only to this server.