blob: 360e23049f6788cadcd4598331b1bd97391028ec [file] [log] [blame]
Chetan Gaonker7f4bf742016-05-04 15:56:08 -07001# -*- text -*-
2#
3# $Id: 1caff077b2429c948a04777fcd619be901ac83dc $
4
5#
6# This file defines a number of instances of the "attr_filter" module.
7#
8
9# attr_filter - filters the attributes received in replies from
10# proxied servers, to make sure we send back to our RADIUS client
11# only allowed attributes.
12attr_filter attr_filter.post-proxy {
13 key = "%{Realm}"
14 filename = ${modconfdir}/${.:name}/post-proxy
15}
16
17# attr_filter - filters the attributes in the packets we send to
18# the RADIUS home servers.
19attr_filter attr_filter.pre-proxy {
20 key = "%{Realm}"
21 filename = ${modconfdir}/${.:name}/pre-proxy
22}
23
24# Enforce RFC requirements on the contents of Access-Reject
25# packets. See the comments at the top of the file for
26# more details.
27#
28attr_filter attr_filter.access_reject {
29 key = "%{User-Name}"
30 filename = ${modconfdir}/${.:name}/access_reject
31}
32
33# Enforce RFC requirements on the contents of Access-Challenge
34# packets. See the comments at the top of the file for
35# more details.
36#
37attr_filter attr_filter.access_challenge {
38 key = "%{User-Name}"
39 filename = ${modconfdir}/${.:name}/access_challenge
40}
41
42
43# Enforce RFC requirements on the contents of the
44# Accounting-Response packets. See the comments at the
45# top of the file for more details.
46#
47attr_filter attr_filter.accounting_response {
48 key = "%{User-Name}"
49 filename = ${modconfdir}/${.:name}/accounting_response
50}