Changed cui policy. Added a cui.pre-proxy section to request a cui when proxying...
authorScott Armitage <s.p.armitage@lboro.ac.uk>
Sun, 21 Oct 2012 15:39:54 +0000 (16:39 +0100)
committerScott Armitage <s.p.armitage@lboro.ac.uk>
Sun, 21 Oct 2012 15:39:54 +0000 (16:39 +0100)
raddb/policy.d/cui

index 4522267..6dc53ac 100644 (file)
@@ -39,6 +39,18 @@ cui.authorize {
        }
 }
 
+#
+#  Before proxing an Access-Request to a remote server, a NUL CUI
+#  attribute should be added, unless it is already present in the request.
+#
+cui.pre-proxy {
+        if (Packet-Type == Access-Request && "%{client:add-cui}" == "yes") {
+               update proxy-request {
+                       Chargeable-User-Identity = '\\000'
+               }
+       }
+}
+                                                                        
 
 #  Add a CUI attribute based on the User-Name, and a secret key
 #  known only to this server.