Re: help - PEAP authentication

[Michael Griego]

It will break inside the EAP code, since the EAP code does a sanity 
check to make sure the EAP Identity matches the User-Name sent by the NAS.

--Mike
-----------------------------------
Michael Griego
Wireless LAN Project Manager
The University of Texas at Dallas

Luis Daniel Lucio Quiroz wrote:
why dont you try this
modules {
...
        #  '[EMAIL PROTECTED]'
        #
        realm suffix {
                format = suffix
                delimiter = "@"
        }
}
and then
authorize {
        preprocess
        ...
        suffix
        ...
}
It should work onthe whay that DN it's rewrited
Letme know if it works for you
Le Jeudi 28 Avril 2005 21:25, Israel Fabio Alves a �crit :
Hi Michael,
I will see this with Extreme Networks (Brazil).
Thanks for your help.
Michael Griego wrote:
Talk to your NAS vendor.  That's completely insane for a NAS to rewrite
the User-Name, not to mention a violation of RFC 3579.
--Mike
Israel Fabio Alves wrote:
Hi,
I need help to solve a problem.
My configuration work 100% with Switch Cisco 2950.
Now I need use Switch from Extreme Networks (Summit 1i), but this
Switch sent request to Freeradius with this "[EMAIL PROTECTED]".
I think use attr_rewrite to change the request from this
"[EMAIL PROTECTED]" to "windowsdomain\username", but I do not
find the way to organize the information with attr_rewrite and I do
not know if this will work for authentication.
Someone have a idea how I solve this.
Very thanks.
Israel Alves
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html