Re: Adding default Realms in users without Realms
OK Thanks for the tips, helped me a lot.
2011/8/24 Arran Cudbard-Bell :
>
> On 24 Aug 2011, at 20:42, joao...@gmail.com wrote:
>
>> Hello everybody I have a doubt and I'm not finding answers on the Internet.
>>
>> I have a freeradius server operating normally, it is a proxy for
>> several Realms, with each Realm leads the user to a different
>> authentication database, so far okay.
>>
>> What I need now is to get users coming to the radius without realm,
>> and add a default realm. I need to do this early on in the
>> authentication processing, so that the other conditions that rely on
>> authentication of the existence of a realm can function correctly.
>>
>
> If you mean just adding a string onto the username then yes...
>
> if(User-Name !~ /username with realm... etc.../){
> update request {
> User-Name := "%{User-Name}@realm"
> }
> }
>
> Arran Cudbard-Bell
> a.cudba...@freeradius.org
>
> RADIUS - Half the complexity of Diameter
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
--
João Paulo de Lima Barbosa
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Adding default Realms in users without Realms
On 24 Aug 2011, at 21:34, joao...@gmail.com wrote:
> Well the way we suggested to me you did not, however based on what you
> gave me I made a small change and it worked. Put this in the
> authorize.
The way I suggested will work if you put it at the top of authorize before
calling any of the realm modules, but anyway if you want to just set the realm,
go ahead... just sounded like you wanted the request to run through existing
logic.
Your code should really be:
if(User-Name !~ /@/){
update control {
Proxy-To-Realm := "myrealm"
}
}
This is the supported way of manually setting a proxy realm.
If you really wanted to do this with the users file
users file:
DEFAULT User-Name !~ /@/, Proxy-To-Realm := "myrealm"
Might work, no guarantees though. Not sure how special Proxy-To-Realm is
-Arran
>
> Thank you.
>
> 2011/8/24 Arran Cudbard-Bell :
>>
>> On 24 Aug 2011, at 20:42, joao...@gmail.com wrote:
>>
>>> Hello everybody I have a doubt and I'm not finding answers on the Internet.
>>>
>>> I have a freeradius server operating normally, it is a proxy for
>>> several Realms, with each Realm leads the user to a different
>>> authentication database, so far okay.
>>>
>>> What I need now is to get users coming to the radius without realm,
>>> and add a default realm. I need to do this early on in the
>>> authentication processing, so that the other conditions that rely on
>>> authentication of the existence of a realm can function correctly.
>>>
>>
>> If you mean just adding a string onto the username then yes...
>>
>> if(User-Name !~ /username with realm... etc.../){
>>update request {
>>User-Name := "%{User-Name}@realm"
>>}
>> }
>>
>> Arran Cudbard-Bell
>> a.cudba...@freeradius.org
>>
>> RADIUS - Half the complexity of Diameter
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
>
> --
> João Paulo de Lima Barbosa
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
Arran Cudbard-Bell
a.cudba...@freeradius.org
RADIUS - Half the complexity of Diameter
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Adding default Realms in users without Realms
Well the way we suggested to me you did not, however based on what you
gave me I made a small change and it worked. Put this in the
authorize.
if(User-Name !~ /@/){
update request {
Realm := "myrealm"
}
}
I wonder how I would do this manipulation Realm users through the file?
Thank you.
2011/8/24 Arran Cudbard-Bell :
>
> On 24 Aug 2011, at 20:42, joao...@gmail.com wrote:
>
>> Hello everybody I have a doubt and I'm not finding answers on the Internet.
>>
>> I have a freeradius server operating normally, it is a proxy for
>> several Realms, with each Realm leads the user to a different
>> authentication database, so far okay.
>>
>> What I need now is to get users coming to the radius without realm,
>> and add a default realm. I need to do this early on in the
>> authentication processing, so that the other conditions that rely on
>> authentication of the existence of a realm can function correctly.
>>
>
> If you mean just adding a string onto the username then yes...
>
> if(User-Name !~ /username with realm... etc.../){
> update request {
> User-Name := "%{User-Name}@realm"
> }
> }
>
> Arran Cudbard-Bell
> a.cudba...@freeradius.org
>
> RADIUS - Half the complexity of Diameter
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
--
João Paulo de Lima Barbosa
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Adding default Realms in users without Realms
On 24 Aug 2011, at 20:42, joao...@gmail.com wrote:
> Hello everybody I have a doubt and I'm not finding answers on the Internet.
>
> I have a freeradius server operating normally, it is a proxy for
> several Realms, with each Realm leads the user to a different
> authentication database, so far okay.
>
> What I need now is to get users coming to the radius without realm,
> and add a default realm. I need to do this early on in the
> authentication processing, so that the other conditions that rely on
> authentication of the existence of a realm can function correctly.
>
If you mean just adding a string onto the username then yes...
if(User-Name !~ /username with realm... etc.../){
update request {
User-Name := "%{User-Name}@realm"
}
}
Arran Cudbard-Bell
a.cudba...@freeradius.org
RADIUS - Half the complexity of Diameter
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Adding default Realms in users without Realms
Hello everybody I have a doubt and I'm not finding answers on the Internet. I have a freeradius server operating normally, it is a proxy for several Realms, with each Realm leads the user to a different authentication database, so far okay. What I need now is to get users coming to the radius without realm, and add a default realm. I need to do this early on in the authentication processing, so that the other conditions that rely on authentication of the existence of a realm can function correctly. Can anyone help me with this issue? Thank you. -- João Paulo de Lima Barbosa - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
