Re: Strip off the domain part from the User-Name

2011-04-04 Thread Thomas Wunder
Hi, On Friday 01 April 2011 18:32:21 Phil Mayers wrote: > On 01/04/11 13:43, Thomas Wunder wrote: > > [mschap] No Cleartext-Password configured. Cannot create LM-Password. > > [mschap] Found NT-Password > > [mschap] ERROR: User-Name (winmac\tom1) is not the same as MS-CHAP

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Thomas Wunder
Hi, call it crude or whatever you want ;-) but that was my last resort: After fiddling with the code of rlm_mschap I found that all I need to do is to comment out line 1201 of rlm_mschap.c (where it says 'return RLM_MODULE_REJECT;') Maybe it has something to do with the conditions (which look a b

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Thomas Wunder
On Wednesday 30 March 2011 15:52:31 Phil Mayers wrote: > First, there's no need to email me directly; I read the list. I totally agree with you I just missed to exchange the recipient address (and after noticing that i also sent it to the list)... sorry! > You *only* set: > with_ntdomain_hack =

Re: Strip off the domain part from the User-Name

2011-03-25 Thread Thomas Wunder
On Friday 25 March 2011 11:15:58 you wrote: > Use %{mschap:User-Name} everywhere; this will give the bare username That sounds consequent but what exactly do you mean by "everywhere"? I use the policy.conf (as you can see by the debug output from my previous posting) to define some policies that

Strip off the domain part from the User-Name

2011-03-23 Thread Thomas Wunder
Hi, I'm currently trying to configure my Win7 clients to do wired 802.1X authentication using the credentials a user provides at the login screen. Wired 802.1X auth itself works fine but as soon as I have it use the logon credentials (using the "Automatically use my Windows logon name and passwo

using Ldap-Group attribute checks in policy.txt

2011-03-07 Thread Thomas Wunder
Hi, i'd like to specify my auth-policies using the rlm_policy module (since i like it's obvious flexibility and the cleanness of it's policy syntax and because i wasn't able to solve some particular problems with rlm_files) but there's one big problem left: until now i've been using the Ldap-Gro