Chetan Gaonker | 7f4bf74 | 2016-05-04 15:56:08 -0700 | [diff] [blame] | 1 | # -*- text -*- |
| 2 | # |
| 3 | # $Id: 1caff077b2429c948a04777fcd619be901ac83dc $ |
| 4 | |
| 5 | # |
| 6 | # This file defines a number of instances of the "attr_filter" module. |
| 7 | # |
| 8 | |
| 9 | # attr_filter - filters the attributes received in replies from |
| 10 | # proxied servers, to make sure we send back to our RADIUS client |
| 11 | # only allowed attributes. |
| 12 | attr_filter attr_filter.post-proxy { |
| 13 | key = "%{Realm}" |
| 14 | filename = ${modconfdir}/${.:name}/post-proxy |
| 15 | } |
| 16 | |
| 17 | # attr_filter - filters the attributes in the packets we send to |
| 18 | # the RADIUS home servers. |
| 19 | attr_filter attr_filter.pre-proxy { |
| 20 | key = "%{Realm}" |
| 21 | filename = ${modconfdir}/${.:name}/pre-proxy |
| 22 | } |
| 23 | |
| 24 | # Enforce RFC requirements on the contents of Access-Reject |
| 25 | # packets. See the comments at the top of the file for |
| 26 | # more details. |
| 27 | # |
| 28 | attr_filter attr_filter.access_reject { |
| 29 | key = "%{User-Name}" |
| 30 | filename = ${modconfdir}/${.:name}/access_reject |
| 31 | } |
| 32 | |
| 33 | # Enforce RFC requirements on the contents of Access-Challenge |
| 34 | # packets. See the comments at the top of the file for |
| 35 | # more details. |
| 36 | # |
| 37 | attr_filter attr_filter.access_challenge { |
| 38 | key = "%{User-Name}" |
| 39 | filename = ${modconfdir}/${.:name}/access_challenge |
| 40 | } |
| 41 | |
| 42 | |
| 43 | # Enforce RFC requirements on the contents of the |
| 44 | # Accounting-Response packets. See the comments at the |
| 45 | # top of the file for more details. |
| 46 | # |
| 47 | attr_filter attr_filter.accounting_response { |
| 48 | key = "%{User-Name}" |
| 49 | filename = ${modconfdir}/${.:name}/accounting_response |
| 50 | } |