Re: FreeRadius + AD + Realms

2010-07-05 Thread Matthew P
> $ man unlang > > This says "put the string %{1} as the value of Stripped-User-Name". > > See the "data types' section of the manual page, and the "strings" section. Got it ;) Thanks for your help, fixed now. btw. the "unlang-way" is quite more flexible than the "legacy-module-way" Was this pr

Re: FreeRadius + AD + Realms

2010-07-04 Thread Matthew P
>> In a general regexp language, I guess that could be done with >> ([\w.-]+)(?...@.*). > Most regexes don't support \w, or (?... constructs. > > Keep it simple: > > if (User-Name =~ /^(.*)@(.*)$/) { > # name = %{1} > # realm = %{2} > } Makes sense now :) Thanks. man regex is written

Re: FreeRadius + AD + Realms

2010-07-03 Thread Matthew P
Thanks for your help Alan, it really makes a difference when learning about Freeradius configuration. > So... decode the user-name using a regex.  You can then use that in > the LDAP configuration.  The LDAP user search is configurable for a > *reason*. I forgot to mention that I need the "user"

Re: FreeRadius + AD + Realms

2010-07-02 Thread Matthew P
>> realm mydomain.com { >> auth_pool = active_directory > > You'll need a line: > > nostrip > > To avoid EAP identity issues. This worked, thanks. Preprocess doesn't strip the username in the default server and EAP works. Although, now a new problem arrised - I can't seem to get th

FreeRadius + AD + Realms

2010-06-29 Thread Matthew P
Hello everyone! I'm new to FreeRadius, so please bear with me. :) Goal: Make FreeRadius look-up a user in ActiveDirectory if he has "mydomain.com" domain. Used method: EAP/TTLS (PAP in the tunnel) This is how I've done it, but it doesn't give the wanted results, so please explain a bit. :) (i