On Mon, 26 Jan 2004, Alessandro Lazzini wrote:

> Hi to all,
> I use freeradius version 0.9.3 and i have a problem with some characters in
> User-Name attribute.
> I often receive from nas this username and this make many problem.
>
>
> Mon Jan 26 09:11:03 2004 : Auth: Login incorrect (rlm_ldap: User not
> found): [}#] (from client RADIUS-PROXY-ROMA port 6363 cli 0981948114)
> Mon Jan 26 09:11:03 2004 : Auth: Login incorrect (rlm_ldap: User not
> found): [}#] (from client RADIUS-PROXY-ROMA port 6363 cli 0981948114)
> Mon Jan 26 09:11:14 2004 : Error: rlm_ldap: ldap_search() failed: Bad
> search filter: (uid=l8IK1RI-4}2X5} } } } )}#)
> Mon Jan 26 09:11:14 2004 : Error: rlm_ldap: ldap_search() failed: Bad
> search filter: (uid=l8IK1RI-4}2X5} } } } )}#)
> Mon Jan 26 10:04:57 2004 : Error: rlm_ldap: ldap_search() failed: Bad
> search filter: ([EMAIL PROTECTED] }7}"}&} }} } }%}&}
> }&nd}'}"}(}"}-}#}&&[EMAIL PROTECTED]"} }7}"}&} }} } }%}&} }&nd}'}"}
> (}"}-}#}&PA~}#)
> Mon Jan 26 10:04:57 2004 : Error: rlm_ldap: ldap_search() failed: Bad
> search filter: ([EMAIL PROTECTED] }7}"}&} }} } }%}&}
> }&nd}'}"}(}"}-}#}&&[EMAIL PROTECTED]"} }7}"}&} }} } }%}&} }&nd}'}"}
> (}"}-}#}&PA~}#)
>
>
> I would like filter characters in username and allow only some characters,
> i try to use this regular expressions
> DEFAULT User-Name !~ "[EMAIL PROTECTED]", Auth-Type := Reject
> in users file but the ldap module search username in database and them
> rejects the user.
> Do you know a way to avoid the search in ldap?

Make sure the files module which reads the users file with the above DEFAULT
entry is before the ldap module in the authorize section.

> Sorry for my bad english :)
>
>
> regards,
>
> Alessandro Lazzini
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>

--
Kostas Kalevras         Network Operations Center
[EMAIL PROTECTED]       National Technical University of Athens, Greece
Work Phone:             +30 210 7721861
'Go back to the shadow' Gandalf

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to