On 11 Jan 2013, at 20:51, Ti Leggett <legg...@mcs.anl.gov> wrote:
>
> On Jan 11, 2013, at 2:35 PM, a.l.m.bu...@lboro.ac.uk wrote:
>
>> hi,
>>
>> dont play with User-Name, update/modify Stripped-User-Name instead and use
>> that in the
>> authn/authz stages
>
> How do I get the remote servers I'm proxying for to understand
> Stripped-User-Name. As far as I can tell Stripped-User-Name isn't even in the
> Access-Request to the proxyied server.
It's not, it's an internal attribute which doesn't get copied into the proxy
request.
In pre-proxy you can add
update proxy-request {
User-Name := "%{%{Stripped-User-Name}:-%{User-Name}}"
}
Which will fix the issue. Where is that User-Name value in the proxy request
coming from, is it the one from the original request? Could you include more
debug output?
-Arran
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
