Details
-
New Feature
-
Resolution: Unresolved
-
Minor
-
None
-
None
Description
The server block option dynamicLookupCommand makes radsecproxy invoke an executable and treat its output as part of the configuration. This is slightly scary from a security point of view.
We should add an option dynamicLookup which does what tools/radsec-dynsrv.sh does, namely resolving SRV _radsec._tcp.REALM and puts the resulting names in a server block, but does it natively through the resolver.
It should probably take two arguments -- the name and type of the server block.
We should add an option dynamicLookup which does what tools/radsec-dynsrv.sh does, namely resolving SRV _radsec._tcp.REALM and puts the resulting names in a server block, but does it natively through the resolver.
It should probably take two arguments -- the name and type of the server block.