Hi,
Can I strip the idm/something/ somehow?
sure. a simple strip in the config would work...
or unlang of course.
eg in radiusd.conf
attr_rewrite copy.user-name {
attribute = Stripped-User-Name
new_attribute = yes
searchfor =
searchin = packet
replacewith = %{User-Name}
}
attr_rewrite
Hmmm this might be overly complicated but you could configure realm1
to proxy back to yourself, stripping the realm, then configure each of
the other two as local realms? I imagine there must be a nicer way...
Alex
On 20/08/07, Jeff Crowe [EMAIL PROTECTED] wrote:
Hi all,
Sorry if this
Is there a way of getting radius to authenicate on the username before
the @ sign and ignore the realm?
Yes, but you have to edit the users file to get rid of the
@realm portion, and configure the realms as LOCAL ones.
The object is to not to have to configure any realms as local.
So that
TS [EMAIL PROTECTED] wrote:
The object is to not to have to configure any realms as local.
That conflicts directly with your requirement to allow users to log
in as user or [EMAIL PROTECTED].
If I have a user whose username is [EMAIL PROTECTED] I can easily specify
arealm.com as local. But
On Tuesday 25 April 2006 01:43, TS wrote:
What does debugging mode say?
Exactly what you'd expect it to say if the realm isn't in proxy.conf:
#
rad_recv: Access-Request packet from host 127.0.0.1:33499, id=115,
length=68 User-Name = [EMAIL PROTECTED]
User-Password = acc355
TS [EMAIL PROTECTED] wrote:
Is there a way of getting radius to authenicate on the username before the @
sign and ignore the realm?
Yes, but you have to edit the users file to get rid of the
@realm portion, and configure the realms as LOCAL ones.
Obviously if the realm is one that we proxy
jesk [EMAIL PROTECTED] wrote:
am i right, that there is no way to do it?
Yes, there is.
See the realms module.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thursday 13 May 2004 09:19, jesk wrote:
hi again,
i got a username with realms like this: realm1/foobar%realm2
is there a way to use realm2 as proxy realm local and get
realm1 stripped away?
i dont want realm1 for authorizing, authentication and accounting.
thanks in advance,
8 matches
Mail list logo
