suffix not work for me

Tony Peña emperor.cu at gmail.com
Thu Sep 27 19:17:21 CEST 2012


ok.. the suffix patch works and get out the @realm...

but monthlycounter is my trouble more bigger... because not
stripped-user-name in the queries...

is possible to do the same patch, in sql/mysql/counter.conf ?? where said.

sqlcounter monthlycounter1 {
counter-name = Monthly-Session-Time
check-name = Max-Monthly-Session
 reply-name = Session-Timeout
sqlmod-inst = sql1
key = User-Name    <---- use the if { your patch} ???
 reset = monthly


2012/9/27 Phil Mayers <p.mayers at imperial.ac.uk>

> On 27/09/12 17:06, Tony Peña wrote:
>
>> i put the hint file more below after radiusd -X.. check again please...
>> i miss policyfilter...
>> i send again both.
>>
>> /etc/freeradius/hints
>>
>> DEFAULT Suffix == "@my.domain.cu", Strip-User-Name
>>
>
> Don't do this. It doesn't work reliably, because you modify the username,
> which breaks some things.
>
> Stop using the hints file, and instead do something like this:
>
> authorize {
>  ...
>  if (User-Name =~ /^(.+)@my.domain.co/) {
>    update request {
>      Stripped-User-Name := "%{1}"
>    }
>  }
>  ...
> }
>
>
> As Alan has pointed out, you can also do this with the "realm" module:
>
> authorize {
>   ...
>   suffix
>   ...
> }
>
> ...but to do that, you ALSO need to edit proxy.conf and define a fake
> local realm. Personally I find this confusing and like to separate proxy
> realms from username realms.
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/**
> list/users.html <http://www.freeradius.org/list/users.html>
>



-- 
Antonio Peña
Secure email with PGP 0x8B021001 available at http://pgp.mit.edu
Fingerprint: 74E6 2974 B090 366D CE71  7BB2 6476 FA09 8B02 1001
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120927/93e52403/attachment.html>


More information about the Freeradius-Users mailing list