New User and AD Question

[Alan Buxey]

Hi,
> I'll try it, but I've read it, and I don't see how this (from realm module):
> 
> #
> #  'domain\user'
> #
> realm ntdomain {
>         format = prefix
>         delimiter = "\\"
> }       
> 
> Is going to apply to this:
> 
> User-Name = "host/doit-tcb-agl.col.missouri.edu"


ignore me. i'm tired. yes, this is a little bit of pain.  you'll be best off using a bit of unlang eg
(put this in the authorize section of your main virtual server)

    if ( User-Name =~ /^host\//i ) {
        if ( User-Name =~ /\\.col\\.missouri\\.edu$/i ) {
            update control {
                Proxy-To-Realm := "col.missouri.edu"
            	}
        }  
    }  

this will then throw the packet to the the part of proxy.conf that has
col.missouri.edu


a bit of regex foo and you can use %{1} return operators etc rather than
hardcode things if you want.... alternatively you can deal with what you know as yours
and then identity what isnt yours and reject or proxy them

machine auth can be pretty nasty...

alan