Is FreeRADIUS 2.1.1 capable of handling NAI decorations

Alexandre Chapellon alexandre.chapellon at mana.pf
Mon Dec 8 23:07:39 CET 2008


Change sql_user_name = %{User-Name} to sql_user_name =
%{Stripped-User-Name} in dialup.conf

Le 02.12.2008 06:37, Luca Adamo a écrit :
>
> Thank you for the quick reply. 
>
> I've tried this solution but the results are not what I expected. 
>
> In fact i defined the following /realm /module:
>
> realm wimax_decorator { 
> format = prefix 
> delimiter = "}" 
> ignore_default = no 
> ignore_null = no 
> }
>
> and i make FR to call it during authorize phase.
>
> The client show up with this NAI {am=1}utenteA at nap.com
> <mailto:am=1%7DutenteA at nap.com> and the module output  (from radiusd
> -X) is the following.
>
> ..
> ..
> [wimax_decorator] Looking up realm "{am=1" for User-Name =
> "{am=1}utenteA at nap.com <mailto:%7Bam=1%7DutenteA at nap.com>";
> [wimax_decorator] Found realm "DEFAULT"
> [wimax_decorator] Adding Stripped-User-Name = "utenteA at nap.com
> <mailto:utenteA at nap.com>";
> [wimax_decorator] Adding Realm = "DEFAULT"
> [wimax_decorator] Authentication realm is LOCAL.
> ..
> ..
>
>
> The problem is that all my subsequent queries suppose the Attribute
> User-Name to be /utenteA at nap.com <mailto:utenteA at nap.com> /instead
> of /{am=1}utenteA at nap.com <mailto:%7Bam=1%7DutenteA at nap.com> /so I
> keep getting /null /result set from the Oracle DB since there aren't
> entries for {am=1}utenteA at nap.com <mailto:am=1%7DutenteA at nap.com> in
> the DB. A possible solution could be making the sql module to use
> Stripped-User-Name instead of the User-Name for the queries but I was
> looking for a solution that doesn't involve the code.
>
> Am i making any mistake above? Any other ideas?
>
> Thank you,
>
> Lu
>
>
>
>
> Il giorno 02/dic/08, alle ore 16:28, A.L.M.Buxey at lboro.ac.uk
> <mailto:A.L.M.Buxey at lboro.ac.uk> ha scritto:
>> 1) set 'prefix' to be }
>>
>> with this, anything before and including }
>> (which may never appear as a realm or username)
>> would be treated like a NT domain and be stripped
>> off logically
>
> ------------------------------------------------------------------------
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20081208/7c0e83db/attachment.html>


More information about the Freeradius-Users mailing list