Re: choose proxy based on AD

2010-09-30 Thread David McPike
In other words, if I proxy to the old radius server, the username needs to be realm\user again.  Set nostrip in the realm configuration. I finally have a solution. I wanted to keep strip enabled because I have to perform the LDAP query on the stripped username. So, I added the following

choose proxy based on AD

2010-09-29 Thread David McPike
Hello All, We are in the process of migrating users from one AD tree to another. The migrated accounts will exist in both AD directories for a while (usernames will not change) and I need to be able to choose a radius server based on an LDAP group membership.  I have this working fine for cases

Re: choose proxy based on AD

2010-09-29 Thread David McPike
Thanks for the suggestion, Alan. I have the regex matching successfully now. However, I am unclear about how to resolve the next issue. I have the following configuration in authorize: if (User-Name =~ /(^[a-z]+)(+)([a-z0-9]+$)/i) { update request {

Re: choose proxy based on AD

2010-09-29 Thread David McPike
auth fails. In other words, if I proxy to the old radius server, the username needs to be realm\user again. Thanks for any further insight. David On Wed, Sep 29, 2010 at 11:39 AM, Alan DeKok al...@deployingradius.com wrote: David McPike wrote: The problem is that if the user has not been