Hello list;
our freeradius is used to authenticate MAC-addresses (locally) and
"humans" (against the windows AD). Therefor I would to like use unlang
to seperate MAC-addresses from humans as they need to be treated
differentely; the MAC-address authentication works fine; so does the
proxying to the realm called "office".
However I am stuck with these two tasks:
a) Append the "office" prefix to the username (since we are lazy and do
not want to type in the domain name when we log on to one of our
switches)
b) proxy the request to the AD
I have placed the following lines of code in the radiusd.conf file:
if (User-Name="nemec") {
%{User-Name}:=office\nemec
Proxy-To-Realm := "office"
}
However they are not being executed. Do they need to be at the top of
the file? Is the syntax correct?
radiusd -X runs with no errors and correctly processes all other
requests, but does not proxy to the "office" realm.
Christopher
Oesterreichische Lotterien Gesellschaft m.b.H., Rennweg 44, A-1038 Wien,
FN 54472 g, Handelsgericht Wien, DVR-Nr: 0476706
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
