[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: get name of authentication realm
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2018-11-29 11:43:31
Message-ID: 34BB90FE-73F2-4480-A117-40A9D00D59F6 () deployingradius ! com
[Download RAW message or body]

On Nov 29, 2018, at 6:02 AM, Zdeněk Sobotka <zdenek.sobotka@nic.cz> wrote:
> 
> Hello, I'm trying to retreive name of "authentication realm" like a
> variable in the Freeradius v3 ("LOCAL" in variable in my case). In debug
> log, near suffix module i see:
> 
> (1) suffix: Checking for suffix after "@"
> (1) suffix: Looking up realm "yyyy.cz" for User-Name = "name@yyyy.cc"
> (1) suffix: Found realm "yyyy.cc"
> (1) suffix: Adding Stripped-User-Name = "name"
> (1) suffix: Adding Realm = "yyyy.cc"
> (1) suffix: Authentication realm is LOCAL

  That means you added a configuration in proxy.conf:

realm yyyy.cc {
}

  Which means it's not going to be proxied anywhere.

> I'm found in documentation, that the "Authentication realm" can be found
> in "control:Proxy-To-Realm"
> (https://networkradius.com/doc/3.0.10/raddb/mods-available/realm.html).
> 
> At logs i have, but that variable is empty:
> (2)     if ("%{control:Proxy-To-Realm}" != "LOCAL") {
> (2)     ERROR: Failed retrieving values required to evaluate condition

  Just check if there's no Proxy-To-Realm.  And you don't need to do a string expansion:

	if (!control:Proxy-To-Realm) {
		... it is being handled locally ...
	}

  Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[prev in list] [next in list] [prev in thread] [next in thread]