Enabling Built-In Realm Selection Methods

You can call the RealmSelector.Execute() method from realm selection scripts to execute built-in Steel-Belted Radius Carrier realm selection methods. The argument to the Execute() method is one of the standard Steel-Belted Radius Carrier realm selection method names (suffix, prefix, dnis, attribute-mapping, or undecorated). The return value is a string containing the name of the realm selected by that method, using the matching rules defined in proxy.ini and applied to the username in the current RADIUS request. If no realm is selected, the Execute() method returns null.

The matching realm must be declared in proxy.ini and the corresponding .dir or .pro file must exist, or the Execute() method returns null. This is true even if the current username contains a valid realm name decoration for the specified realm selection method.

If you call the Execute() method with the suffix or prefix argument, you must make sure that the corresponding suffix or prefix realm selection methods are enabled or the result is always null. The suffix and prefix methods are enabled by default when you declare a script in the [Processing] section of proxy.ini. If you declare a realm selection script in the [Inner_Authentication] section of a tunneled authentication plug-in .aut file, the suffix and prefix methods are not enabled by default. To use the suffix and prefix methods with the Execute() function, you must either declare these methods explicitly, or declare a script in the [Processing] section of proxy.ini.

A realm selection script can call built-in realm selection methods at any time during its execution. Depending on its program logic, the script might return the realm name produced by the built-in method as its result or continue processing and return a different result.