Skip to content

Commit

Permalink
auth: Use rip instead of real_rip in policy server attributes
Browse files Browse the repository at this point in the history
real_rip contains proxy IP, not client IP
  • Loading branch information
cmouse authored and mrannanj committed Feb 15, 2018
1 parent 0f6b8a8 commit f28e0d4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/auth/auth-settings.c
Expand Up @@ -300,7 +300,7 @@ static const struct auth_settings auth_default_settings = {
.policy_server_timeout_msecs = 2000,
.policy_hash_mech = "sha256",
.policy_hash_nonce = "",
.policy_request_attributes = "login=%{orig_username} pwhash=%{hashed_password} remote=%{real_rip} device_id=%{client_id} protocol=%s",
.policy_request_attributes = "login=%{orig_username} pwhash=%{hashed_password} remote=%{rip} device_id=%{client_id} protocol=%s",
.policy_reject_on_fail = FALSE,
.policy_hash_truncate = 12,

Expand Down

0 comments on commit f28e0d4

Please sign in to comment.