Reynold McGuire wrote:
It gets to the pre-proxy, adds the domain after the user name, but doesn't
strip out the 'DOMAIN\\\\'
Set "
Do you see any evidence that the 'ntdomain' is actually doing anything? I
don't see much of anything except the one line 'modcall[authorize]: module
"ntdomain" returns updated for request 0'
The lines immediately before the modcall[authorize] are also from the
ntdomain module. So, it's output is:
rlm_realm: Looking up realm "adm.suffolk.edu" for User-Name =
"adm.suffolk.edu\rmcguire"
rlm_realm: Found realm "adm.suffolk.edu"
rlm_realm: Proxying request from user rmcguire to realm adm.suffolk.edu
rlm_realm: Adding Realm = "adm.suffolk.edu"
rlm_realm: Preparing to proxy authentication request to realm
"adm.suffolk.edu"
modcall[authorize]: module "ntdomain" returns updated for request 0
That means it's definitely running.
Any other ideas Phil / Group?
Have you set "nostrip" on the realm in proxy.conf? Set "strip". For the
behaviour you're seeing to be occurring, Stripped-User-Name must be unset.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
